last executing test programs: 20m43.40178496s ago: executing program 0 (id=256): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 'xfrm0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b7030000feffffff850000000a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r2, &(0x7f00000003c0)="d5c0fd98b93dd5578024986b26dd88d3b6af7c9245", 0x15) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'veth0_vlan\x00'}}, 0x1e) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x35, 0x0, "fd4e774e0f7cc8ba196d221230558161ad37e0ded15072b810a8ae11112cd0ab13e6b9fa08efdd93677c1b19fee75cb809252747680be8c480678c31768093f0d0cf5292de1a7505f7cc281300"}, 0xd8) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfeff, @empty, 'ip_vti0\x00'}}, 0x1e) close(r1) 20m42.825707474s ago: executing program 0 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x6, 0xa, 0x3, 0xffffffff}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) mmap(&(0x7f00005fc000/0x4000)=nil, 0x4000, 0x4000008, 0x4010, 0xffffffffffffffff, 0x2000) syz_emit_ethernet(0x2bd, &(0x7f0000000300)={@broadcast, @broadcast, @val={@val={0x88a8, 0x6}, {0x8100, 0x0, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xf0, 0x1, "ae2e", "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"}}}}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000180)={0x10, 0x8000, 0xe8b, 0x9f2e, 0x9}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 20m40.591399383s ago: executing program 0 (id=259): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x14, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000010) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r4, 0x0, 0xffff, 0x2, &(0x7f0000000080)="7ced", 0x5}) 20m31.449414519s ago: executing program 0 (id=271): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x48001051, r3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x39, 0x1a, r4, 0x0) getdents64(r1, 0x0, 0x22) (fail_nth: 1) 20m30.701484183s ago: executing program 0 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x6, 0xa, 0x3, 0xffffffff}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) r5 = socket$unix(0x1, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r5, 0xffffffffffffffff, 0x0) 20m28.592697854s ago: executing program 0 (id=275): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000640)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYRESHEX=r1], 0x1258}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0xfffffffffffffed4, &(0x7f0000000240)={&(0x7f0000000280)={0x18, 0x140f, 0x1, 0x70bd26, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000005c0)="3ba0ec1e6f205f0513359bd607e20712fff3b64a78ec3689f9ec8ef3e93408017cd765cc1bcb26824b68cb9843bf5659e5c760bc3542b7945af770c40509fc439efefa2f3ae9669900f4083722c3bb05bd007e0b18f705aa8f9442d3f72164171f76841ccfd60e9fa3fc8cfd593bb3c44c0b730c5189c5a537b7aed148435a6fd56b52fd871bd9ec15cb294ff9f58cf5770d9f857f5de1b5fd80d08c33", 0x9d, 0xfffffffffffffffb) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x18, {0x18, 0x2c, "c46f3e99b386639ea27c7565a7753fc4c01bec961835"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="80135100000071e9f9bb3b7436f47a1379875eb09a78733a0a97016c9defdcddf456ae482d30b1e88e8c75c237828eafbcea159043764e9e45f08feed8ac7679f4642262785a0f55fa31e75fd774b72ace2c7d89659466"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x4, 0x0, 0x8, 0x5, 0x101, 0xa, 0x800, 0x5, 0x2, 0x340, 0x6, 0x1000}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x80000001}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x3}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000a40)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m13.378700067s ago: executing program 32 (id=275): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000640)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYRESHEX=r1], 0x1258}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0xfffffffffffffed4, &(0x7f0000000240)={&(0x7f0000000280)={0x18, 0x140f, 0x1, 0x70bd26, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000005c0)="3ba0ec1e6f205f0513359bd607e20712fff3b64a78ec3689f9ec8ef3e93408017cd765cc1bcb26824b68cb9843bf5659e5c760bc3542b7945af770c40509fc439efefa2f3ae9669900f4083722c3bb05bd007e0b18f705aa8f9442d3f72164171f76841ccfd60e9fa3fc8cfd593bb3c44c0b730c5189c5a537b7aed148435a6fd56b52fd871bd9ec15cb294ff9f58cf5770d9f857f5de1b5fd80d08c33", 0x9d, 0xfffffffffffffffb) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x18, {0x18, 0x2c, "c46f3e99b386639ea27c7565a7753fc4c01bec961835"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="80135100000071e9f9bb3b7436f47a1379875eb09a78733a0a97016c9defdcddf456ae482d30b1e88e8c75c237828eafbcea159043764e9e45f08feed8ac7679f4642262785a0f55fa31e75fd774b72ace2c7d89659466"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x4, 0x0, 0x8, 0x5, 0x101, 0xa, 0x800, 0x5, 0x2, 0x340, 0x6, 0x1000}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x80000001}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x3}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000a40)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m54.322053992s ago: executing program 4 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$unix(0x1, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r4, 0xffffffffffffffff, 0x0) 18m49.815252835s ago: executing program 4 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) signalfd(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) 18m44.705473593s ago: executing program 4 (id=417): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setuid(0xee00) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x4, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000040)="a36dbb9d", 0x0, 0x0, 0x11, 0x0, 0x0}) 18m44.349112732s ago: executing program 4 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x10, 0x0, 0x3}, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getdents64(r2, 0x0, 0x0) 18m42.777168392s ago: executing program 4 (id=422): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) 18m34.989314482s ago: executing program 4 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000140)=0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket(0x200000100000011, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 18m34.410036396s ago: executing program 33 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000140)=0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket(0x200000100000011, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 17m13.978153152s ago: executing program 1 (id=562): writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x258}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) 17m11.834666278s ago: executing program 1 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, 0xfffffffffffffffe) syz_open_dev$video(0x0, 0x485, 0x40000) set_mempolicy(0x3, 0x0, 0x8) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) unshare(0x62040200) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@local}, &(0x7f00000000c0)=0x14) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@getchain={0x64, 0x66, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0x4}, {0x10, 0xfff2}, {0x2, 0x6}}, [{0x8, 0xb, 0xe77}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}]}, 0x64}}, 0x44080) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0585611, &(0x7f0000000200)={0x0, 0xd, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6"}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004700), 0x0, 0x44840) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) 17m7.921393343s ago: executing program 1 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000340)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x8001, @local, 0x146}}, 0x24) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0xff}, &(0x7f0000000340)=0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000480)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000200), 0x0, r4, 0xdededede}) r5 = syz_open_dev$video4linux(&(0x7f00000022c0), 0xa90, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000002340)={0xa10000, 0x7, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000002300)={0x990a91, 0x3ff, '\x00', @value64=0x8}}) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804) recvmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/111, 0x6f}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000880)=""/130, 0x82}], 0x4, &(0x7f0000000980)=""/115, 0x73}, 0x5265}, {{&(0x7f0000000a00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/26, 0x1a}, {&(0x7f0000000ac0)=""/49, 0x31}, {&(0x7f0000000b00)=""/228, 0xe4}], 0x3}, 0x716}, {{&(0x7f0000000c40)=@alg, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000cc0)=""/223, 0xdf}, {&(0x7f0000000e00)=""/68, 0x44}, {&(0x7f0000000e80)=""/233, 0xe9}], 0x3, &(0x7f0000000fc0)=""/253, 0xfd}, 0x8}, {{&(0x7f00000010c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001140)=""/180, 0xb4}, {0x0}], 0x2, &(0x7f0000001340)=""/108, 0x6c}, 0x9}, {{&(0x7f00000013c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001440)=""/73, 0x49}], 0x1}, 0x5}, {{&(0x7f0000001580)=@phonet, 0x80, &(0x7f0000001940)=[{&(0x7f0000001600)=""/248, 0xf8}, {&(0x7f0000001700)=""/114, 0x72}, {&(0x7f0000001800)=""/58, 0x3a}, {0x0}], 0x4, &(0x7f00000019c0)=""/78, 0x4e}, 0x9}, {{&(0x7f0000001a40)=@can, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001ac0)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/76, 0x4c}, {&(0x7f0000001cc0)=""/95, 0x5f}], 0x4, &(0x7f0000001d80)=""/233, 0xe9}, 0x1}, {{&(0x7f0000001e80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000001f00)=""/240, 0xf0}, {&(0x7f0000002380)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003540)=""/147, 0x93}], 0x4, &(0x7f0000003680)=""/217, 0xd9}, 0x7}, {{&(0x7f0000003780)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003800)=""/161, 0xa1}, {&(0x7f00000038c0)=""/187, 0xbb}, {&(0x7f0000003980)=""/69, 0x45}, {&(0x7f0000003a00)=""/116, 0x74}], 0x4, &(0x7f0000003b00)=""/148, 0x94}, 0x4}, {{&(0x7f0000003bc0)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000005240)=""/166, 0xa6}, 0x9}], 0xa, 0x0, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0xd, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000180)={0x7, 0x2, 0x1, 0x12, 0x4}) 17m3.993189893s ago: executing program 1 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x10, 0x0, 0x3}, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getdents64(r2, 0x0, 0x0) 17m2.994628969s ago: executing program 1 (id=584): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2c41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x8, 0x5, "d349c355e8"}}) socket(0x10, 0x803, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x4d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2b) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20082) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x10000005, 0x400, 0xfffffffb}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 16m52.026673586s ago: executing program 1 (id=597): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800"/40], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 16m51.066415663s ago: executing program 34 (id=597): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800"/40], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 14m41.598978861s ago: executing program 7 (id=786): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010101, @local}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x10}]}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700), &(0x7f0000000740)=[{0x3, 0x3, 0x10, 0x7}], 0x10, 0xff}, 0x94) 14m36.590038837s ago: executing program 7 (id=794): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x20000) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) lseek(0xffffffffffffffff, 0x9, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x183383, 0x0) 14m35.274265213s ago: executing program 7 (id=796): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x703c}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) gettid() (async) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)) (async) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) socket$unix(0x1, 0x2, 0x0) (async) ppoll(&(0x7f0000000300)=[{r2, 0x703c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) (async) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[], 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) (async) 14m30.913780345s ago: executing program 7 (id=805): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000700)=""/176, 0xb0}], 0x1, 0x4, 0x0) 14m29.402680612s ago: executing program 7 (id=810): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c010}, 0xc000) chdir(&(0x7f0000000540)='./cgroup\x00') prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x7ffffffc, 0x0) getdents64(r4, 0x0, 0x28) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x200400c4}, 0x800) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001ac14140900000000000000000000000000000004000001e2af9ba807d10100000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000002004000000000000000fdffffffffffffff50000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r7, 0x0, r9, 0x0, 0x6, 0x0) splice(r8, 0x0, r6, 0x0, 0x6, 0xc) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x6) close_range(r6, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1a78, 0x40, 0x2, 0x207}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000180)=[@ioring_restriction_sqe_flags_required={0x3, 0x19}, @ioring_restriction_sqe_flags_required={0x3, 0x7}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 14m26.647359786s ago: executing program 7 (id=818): syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaa8a000000000000080045000038030000000001907864010100ac1414aa57ba9078032ce00045000000000001000100000000000000ac1414aa000000f2000000001726c61a02eb5ad92957"], 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) r4 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4040884}, 0x4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fsopen(&(0x7f0000000340)='ext4\x00', 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000040)={{@hyper, 0xc}, 0x0, 0x2, 0xa}) shutdown(r0, 0x2) 14m10.98383974s ago: executing program 35 (id=818): syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaa8a000000000000080045000038030000000001907864010100ac1414aa57ba9078032ce00045000000000001000100000000000000ac1414aa000000f2000000001726c61a02eb5ad92957"], 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) r4 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4040884}, 0x4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fsopen(&(0x7f0000000340)='ext4\x00', 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000040)={{@hyper, 0xc}, 0x0, 0x2, 0xa}) shutdown(r0, 0x2) 13m37.211719199s ago: executing program 5 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) 13m33.253643238s ago: executing program 5 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x40000) 13m31.213069112s ago: executing program 5 (id=891): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000113e80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "31f0a9fb7ddd9f"}) rt_tgsigqueueinfo(0x0, 0x0, 0x19, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000114e80)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "d2aceb73a56730"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x12, 0xffffffffffffffff, 0x81000000) r12 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r12, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e24e000000100000000b82b5dcf4d7a37000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1e010100"/357], 0x190) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_nofollow}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) r13 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r13, 0x707, &(0x7f0000000380)={&(0x7f0000001880)=[{0x7, 0x8000, 0x0, 0x0}, {0x5, 0x1, 0x0, 0x0}], 0x1a}) 13m27.091359785s ago: executing program 5 (id=895): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 13m22.791300148s ago: executing program 5 (id=900): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x40000) 13m20.40005323s ago: executing program 5 (id=903): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="590027bd7000f9dbdb254400000008000300", @ANYRES32=r3, @ANYBLOB="0c0023800500050009000000"], 0x28}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ptrace$cont(0x38, r4, 0x9, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x10) io_uring_setup(0x41ad, &(0x7f0000000140)={0x0, 0xfc1b, 0x16dff, 0xc}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) capset(0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setreuid(0xee01, 0x0) 13m5.207889189s ago: executing program 36 (id=903): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="590027bd7000f9dbdb254400000008000300", @ANYRES32=r3, @ANYBLOB="0c0023800500050009000000"], 0x28}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ptrace$cont(0x38, r4, 0x9, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x10) io_uring_setup(0x41ad, &(0x7f0000000140)={0x0, 0xfc1b, 0x16dff, 0xc}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) capset(0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setreuid(0xee01, 0x0) 1m33.731210948s ago: executing program 2 (id=2272): r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r0, &(0x7f00000002c0)={'))', 0x20, 0x38}, 0x2e) 1m32.927565901s ago: executing program 2 (id=2275): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000111401000000000002000000080003000000000008000100000000005ba315817954598ee649edf4c3aab2b26ef49bf68c43eea5586bba34368e5371f12e832118af7631e51b83db4418"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0x0, 0x0, @val=@netfilter={0x5, 0x1, 0x3}}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="b318"}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b1b, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) setreuid(0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@loopback, @in6=@mcast2, 0x4e21, 0x0, 0x4e23, 0x6, 0x2, 0xa0, 0x20, 0x1}, {0x81, 0x4, 0x9, 0x4e20, 0xffffffffffff1f26, 0x10000, 0x5, 0x3}, {0x9, 0xe, 0x1, 0x1780000000}, 0x3, 0x6e6bb4, 0x2, 0x0, 0x0, 0x2}, {{@in=@remote, 0x4d3, 0x33}, 0x8, @in6=@local, 0x3501, 0x0, 0x3, 0x6, 0x9, 0x5, 0xde5f}}, 0xe8) fstat(r1, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r6) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)=ANY=[@ANYBLOB="6e4f737701702c00"]) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x2e, 0x24, 0x118, 0x0, 0x400, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x0, 0x5, {0x2, 0x3}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x80}}, {0x4}}]}]}, 0x6c}}, 0x0) socket$inet(0x2, 0x2, 0x0) 1m30.050298041s ago: executing program 2 (id=2280): prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 1m27.617645854s ago: executing program 2 (id=2282): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x10, 0x0, 0x3}, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getdents64(r2, 0x0, 0x0) 1m26.772613666s ago: executing program 2 (id=2285): socket$nl_netfilter(0x10, 0x3, 0xc) gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x1c, 0x2}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x1, 0x6, 'LJn', 0x5, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x2c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0x29, 0x0, 0x4, 0x0, 0x2, 0x8, 0x7}], "3911afb5fb0bd29c"}}}}}}}, 0x0) 1m21.193319659s ago: executing program 2 (id=2292): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000009c00)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x3006, 0x3}, 0x18, 0x3) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x2) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x1c48}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x8) landlock_restrict_self(r3, 0x4) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m19.030885618s ago: executing program 37 (id=2292): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000009c00)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x3006, 0x3}, 0x18, 0x3) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x2) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x1c48}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x8) landlock_restrict_self(r3, 0x4) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 16.2151139s ago: executing program 3 (id=2389): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)=ANY=[@ANYBLOB=' \r\x00\x00q\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b6, 0x0, &(0x7f0000000180)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd8730945636837fa980b788a1e78b46a2599f69c84033e65c1d6a53200386ce51d4a9c6ff0300008a645c2b9c0614907dac12c6d3cd73c6f7e79b50b7773a97aad715106eca76bf796a430e6c6a874a1602148380c5a6fcf022b0a04fcbefc0d85cdf5d0b97e6d6336b1742017dfd81f3ebc1b048e42b13e8f8486976acd9d7b9f50900dff445f7fa5e166f86db80a5022d4a325e208f57f534d397b00996c9b7a8ec126165847603201e39f0d9aa8ff5e67722c594a5d8bae0210aef032d3facd18db998014f0e10be9456d0090de35dc0c3ec1ba60d62330540086efd653b5336e8ac6ef838093da55d93b0b3ab0be5f07333d156930b4b4bb193112d582e4d57e60c67365429f03f5ac6951ca9865887027aeb1874955d47fe6f180f3eb3f9103f4c9e351576d6a988b03405cca892c3f3bd5627704c4bd8e7c9d8284f084025f4c5db7f283df92c057aeaaa528ada852770ddd180135caf320f4cb580eb72bbc1aaec63dbc7cfc64799462116bd5107a010232a1e56379c93c60324df8e288c8634531ae5cc8cafa6c9343e23b5795bc186a950d0ae15", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000500)=0x1) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x24, 0x66, {0x66, 0xd, "f7dda49d0aad5ba6acfed6f889aef481e9665a687c84c9c97eeefeddbdf1e2cf8b72ac7d98b4017bea357cea12a4c5a0dea8d99ab761b4f9eeca57bed75e4e14d9378f6589c7c181ceb1bd035975cbadaa214abac7ee2c88cb6ce3126476e5216f8bc088"}}, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000000610ed0e1b8998e06d9d7ef8eaae262ad7f53d38410d2f0489fdfb1f5e49d575546d8a8887e1dc86b9acf3710481baeee9cb694fd64cb6edaa3a2c225544f82f760383a6cdb4000"]}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x20, 0xc, 0x71, "a80f6a50efe144d3981b84a363889cdf5d776b01dd78cb7b5021fccf50a39f9abfef63c61d63fd90e9ac8ea9cb53cf922f4713f3c1e38e2f3e9029aa6ea1056f0c9ea3f6690e7f6204b9b25e00cb25b050f8eb849ec7419ce3681343453515d4ba9482e6131e59e0148ba71ff871392fe5"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0x20, 0x0, 0x4d, {0x4b, "3ad975b2d14568c27543be398adb58525e5abbadf96462e41a3f1c042a7f9309ef728d6208ebf8b9074043877e2cb00876d918b4c93b6bee0bbe3babb91d3d0140c56fb7943052d5358565"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.047883084s ago: executing program 6 (id=2391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x2c, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x44da3693}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000048}, 0x40810) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x3c, r2, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x4004) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x440c1}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x20000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000300), 0x0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)={0x3c, 0x2d, 0xc05, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x16, 0x1, 0x0, 0x0, @binary="37d7483164b967c6c6fbf4f74ab8a5aa6cf6"}]}]}, 0x3c}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$NILFS_IOCTL_GET_BDESCS(r5, 0xc0186e87, &(0x7f0000000600)={&(0x7f0000000500)=[{0x3, 0x8001, 0xffffffff, 0x7, 0x8}, {0x46b, 0x3, 0xfffffffffffff58f, 0x3, 0x2}, {0x366, 0x0, 0x9, 0x8}, {0xd, 0x5, 0x9, 0x8001, 0x1a}, {0x1, 0x7, 0x13fc00000, 0x400, 0x1000}], 0x5, 0x28, 0x2, 0x1}) sendto$inet(r8, 0x0, 0xffef, 0x20048000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x26) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x200, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x8) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40186f40, &(0x7f0000000040)=0x1f) 11.886432741s ago: executing program 3 (id=2393): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x8, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) 11.57951106s ago: executing program 9 (id=2394): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$tipc(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={0x0}, 0x1, 0x0, 0x0, 0xc0000}, 0x40080) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf255c00000008006b001400000008006b006801000008006b000a00000008006b001c02000008006b006801000008006b0014000000"], 0x44}}, 0x40000a4) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000200)=0x188, 0x37) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0xffc7, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f000000ae80)=[{{0x0, 0x0, 0x0}, 0xe26}], 0x1, 0x10000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f00000003c0)={'bond_slave_0\x00', 0x5}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000880)={{r3}, r4, 0x0, @inherit={0x60, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000003000000000000000700000000000000030000000000000012000000000000000000fb10ce320000000000000000000006000000000000000600000000000000ec05000000000000800300000000"]}, @subvolid=0x81}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 9.442669068s ago: executing program 3 (id=2396): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$full(0xffffff9c, &(0x7f0000000240), 0x200200, 0x0) socket$inet6(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/profiling', 0x1, 0x18f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) memfd_secret(0x80000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_open_procfs(0x0, &(0x7f0000000280)='timerslack_ns\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e61, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 8.958937128s ago: executing program 6 (id=2397): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000300)="2906797ae333dad1f96ad9e2bee1e519152ebd7ae61e05437ee7ecee28c7b4c3da6107bb51bb718d", 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x20000880) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r7, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10}]}, 0x38}}, 0x24000000) sched_setaffinity(0x0, 0xfffffffffffffccd, &(0x7f00000001c0)=0x2) unshare(0x64000600) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r8, &(0x7f0000001180)=""/4096, 0x1000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x6071, 0x0, 0xe7, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000340)={0x1, @sliced={0x65e, [0xd, 0x7, 0x5, 0xb890, 0x3ff, 0x8000, 0x2, 0x101, 0x4, 0x5, 0x64, 0x7, 0x7, 0x0, 0x3, 0x4, 0x5, 0x2, 0x741, 0x101, 0x4, 0x55a8, 0x0, 0x4, 0xffff, 0x4, 0x0, 0x4, 0x8e20, 0xff, 0x401, 0xffff, 0xcb8, 0x1, 0x1, 0x7, 0x81, 0x9, 0x400, 0x6, 0x4, 0x3, 0x7ff, 0x0, 0x9, 0x1, 0xc4, 0x7f], 0x9f7e}}) 7.936397949s ago: executing program 8 (id=2398): unshare(0x22020600) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xe400090d) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) 7.54557983s ago: executing program 9 (id=2399): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(0x3) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r2, 0xc02063a1, 0x7ffffffffffffffe) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r1, r1) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x10) write$dsp(r0, &(0x7f0000000380)="8f02b1145e6308d98e553f07835f9de2b8389279a5becfcec34a3d806185be01242abe00d48cc72f5609a070748b29eb2f75f44e93bda8a5efda9fdb8d81de5cbbff7e635ebc47f0b24291f53d43b66ae3dd06c0069e175964893c027fac58c40a24024b0b942528acd3204bbe5753d7ba65845d9eafd7ea834778c2c99b33f9", 0x80) 7.245408888s ago: executing program 6 (id=2400): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r0, 0x400}, {r0, 0x103}, {r0, 0x201}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x8d]}, 0x8) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000001c0)={0x9d0000, 0xb0b, 0x0, r0, 0x0, &(0x7f0000000180)={0x9909de, 0x7, '\x00', @ptr=0xffffffffffffffff}}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) pipe(0x0) socketpair(0x15, 0x6, 0x41, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000480)={{0x0, @name="8f6879f69b4d914c7ca1165f70fc292ec0c8d249740d1d02981ff0be7e77b8a5"}, 0x8, 0x9, 0x4e6}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000004c0)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000500)=0x23d, 0x4) r4 = syz_open_dev$radio(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000600)={0xfffffff, 0x5, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x980926, 0xff, '\x00', @p_u8=&(0x7f0000000580)}}) 6.317552028s ago: executing program 9 (id=2401): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) statx(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_pgetevents(r0, 0x8, 0x40, &(0x7f0000002800)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x0}]) io_destroy(r0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') io_pgetevents(r0, 0xd, 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x77359400}, 0x0) 5.87125702s ago: executing program 3 (id=2402): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000300)=""/133, &(0x7f00000003c0)=0x85) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@local, @in6=@private2, 0x4e21, 0xea, 0x4e24, 0x35, 0xa, 0x0, 0x0, 0xb8e04ec043bc740b, 0x0, r2}, {0x7fff, 0x8, 0xffffffffffff7fff, 0x8000, 0x1, 0x3, 0xd, 0x4}, {0x8001, 0x4, 0x0, 0x6}, 0x4, 0x6e6bb5, 0x2, 0x1, 0x1, 0x3}, {{@in6=@mcast1, 0x4d3, 0x6c}, 0xa, @in=@multicast2, 0x3504, 0x1, 0x0, 0x21, 0x80000000, 0x7, 0x7}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000400)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e26, 0xfffffffe, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f0000000000)=0xab) 5.867781208s ago: executing program 6 (id=2403): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) pipe2$9p(&(0x7f0000000040), 0x0) 5.785947695s ago: executing program 8 (id=2404): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r2], 0x15) 5.603603203s ago: executing program 9 (id=2405): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$tipc(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={0x0}, 0x1, 0x0, 0x0, 0xc0000}, 0x40080) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf255c00000008006b001400000008006b006801000008006b000a00000008006b001c02000008006b006801000008006b0014000000"], 0x44}}, 0x40000a4) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000200)=0x188, 0x37) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0xffc7, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f000000ae80)=[{{0x0, 0x0, 0x0}, 0xe26}], 0x1, 0x10000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f00000003c0)={'bond_slave_0\x00', 0x5}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000880)={{r3}, r4, 0x0, @inherit={0x60, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000003000000000000000700000000000000030000000000000012000000000000000000fb10ce320000000000000000000006000000000000000600000000000000ec05000000000000800300000000"]}, @subvolid=0x81}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 5.015285352s ago: executing program 8 (id=2406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000", @ANYRES32=r2, @ANYBLOB="31000e008000fc00ffffffffffff0802110000000802110000000000000000000000000064000308710701ffff0000546800000008002600a014000008000c006400000008000d00fdffffff"], 0x68}}, 0x0) 4.819222795s ago: executing program 9 (id=2407): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$tipc(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={0x0}, 0x1, 0x0, 0x0, 0xc0000}, 0x40080) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x44}}, 0x40000a4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r2, &(0x7f000000ae80)=[{{0x0, 0x0, 0x0}, 0xe26}], 0x1, 0x10000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002040)=@delchain={0x59c, 0x65, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xfff2}, {0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x180, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1e, 0xffff}}, @TCA_MATCHALL_ACT={0xcc, 0x2, [@m_gact={0xc8, 0xf, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff8, 0x1001, 0x10000000, 0x94b9, 0xff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1cc6, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1ff, 0x6, 0x5, 0x8, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7, 0x7, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x7da, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1eb9, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x13cb, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf37, 0x2}}]}, {0x9, 0x6, "104071474b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xffff}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xfff2}}, @TCA_MATCHALL_ACT={0x80, 0x2, [@m_mirred={0x7c, 0x8c, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x7, 0xffffffff, 0x602}, 0x5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x9, 0x10000000, 0x1, 0x63b6}, 0x3}}]}, {0xe, 0x6, "6eb00c2ea9112893bc64"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @filter_kind_options=@f_u32={{0x8}, {0x3d8, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xffffffff}, @TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_U32_HASH={0x8, 0x2, 0xfffffffc}, @TCA_U32_DIVISOR={0x8, 0x4, 0x4b}, @TCA_U32_SEL={0x3a4, 0x5, {0xf, 0x7, 0xff, 0x5, 0x2, 0x3, 0x7f, 0x7, [{0x1a80, 0xf, 0x7, 0xa}, {0x8001, 0xfb9, 0x0, 0xfffffffd}, {0x9, 0xe9, 0x8, 0x623}, {0xfffffffd, 0x7fff, 0x101, 0x6}, {0x5955d83, 0xbba, 0x0, 0xdba}, {0x8, 0x81, 0x4, 0xfffffffe}, {0x6, 0x5, 0x7fffffff, 0x6}, {0x4, 0x7, 0x4, 0x3}, {0x401, 0x8, 0xa0, 0x80000000}, {0x7fff, 0x0, 0xb35d, 0xffffffff}, {0x2, 0x2, 0x6, 0xe}, {0x80000000, 0x1, 0xb, 0x8}, {0xfffffeff, 0x100, 0x401, 0x7}, {0xe33, 0x0, 0x6, 0x1ff}, {0x3, 0x8, 0xff, 0x4}, {0x1, 0xee, 0xd, 0xddfe}, {0x9, 0xd, 0x0, 0x5}, {0x8, 0x4, 0x6, 0x1ff}, {0x2, 0x562, 0x4, 0xea9}, {0x7, 0x7, 0xff, 0x2}, {0x7, 0x3, 0x10000, 0xfffffff9}, {0x6, 0x9, 0xfffffafa, 0x200}, {0xde1d, 0x5, 0x4, 0xfffffffe}, {0x6, 0xff, 0x7, 0x3}, {0x51589554, 0x7, 0x8b, 0x1}, {0x80, 0x7, 0x8, 0xe1}, {0x2, 0x9, 0x7, 0xfffffffa}, {0x9, 0x3, 0x9, 0x5}, {0x3ff, 0x0, 0x7f, 0x7}, {0x5, 0x2, 0x80, 0x9b}, {0x81, 0x1ff, 0x40, 0x7ff}, {0x10001, 0x8, 0x1, 0x4}, {0x9, 0x6, 0xffff}, {0xfffffff7, 0x2f, 0x3, 0x8}, {0x3ff, 0x2, 0x6, 0x8000}, {0x9, 0x6151, 0x6, 0x7ff}, {0x7, 0xc, 0x3, 0xe}, {0x8, 0x80000001, 0x2, 0x7f80}, {0x5, 0x7, 0xc605, 0x9}, {0xffffffff, 0xb2, 0x1ff}, {0x24e1a439, 0x9, 0x0, 0x4}, {0x36cbd434, 0xffff, 0x6, 0x9b4}, {0x1, 0x3, 0x4, 0x5}, {0x6, 0xfffffffe, 0x3, 0x4}, {0x0, 0xd, 0x8001, 0x1}, {0x0, 0x3, 0x3, 0x9}, {0xfffffffc, 0x4, 0x8}, {0x6, 0x8000, 0x3, 0xfffffffa}, {0x23, 0x8, 0x4}, {0x3, 0x0, 0x10001, 0x3}, {0x2, 0xa, 0x4, 0x8}, {0xec43, 0xddda, 0xffffb15f, 0x9}, {0x5, 0x5, 0xfffffff8, 0x10001}, {0x8, 0x81, 0x7, 0x5}, {0xb, 0x6, 0xc5, 0x3ecc}, {0x4, 0x6, 0x0, 0x2}, {0x4, 0xfffffffc, 0x2, 0x2}]}}, @TCA_U32_MARK={0x10, 0xa, {0x1, 0x1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x59c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f00000003c0)={'bond_slave_0\x00', 0x5}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 4.717913497s ago: executing program 3 (id=2408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x80001) mmap(&(0x7f000065e000/0x3000)=nil, 0x3000, 0x1, 0x32, r0, 0x130c4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4000) syz_emit_ethernet(0xeb, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0xb5, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@srh={0x3b, 0x8, 0x4, 0x4, 0x58, 0x50, 0x7f, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x4, 0x6, 0x2, 0x8, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 2.785998311s ago: executing program 3 (id=2409): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="590027bd7000f9dbdb254400000008000300", @ANYRES32=r3, @ANYBLOB="0c0023800500050009000000"], 0x28}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ptrace$cont(0x38, r4, 0x9, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x10) io_uring_setup(0x41ad, &(0x7f0000000140)={0x0, 0xfc1b, 0x16dff, 0xc}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) capset(0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setreuid(0xee01, 0x0) io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2}) 2.517581499s ago: executing program 9 (id=2410): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7, 0x3, 0x4, 0x2, 0x8, 0xfde}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0xfffffffe, 0x1) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000000)) syz_usb_connect$printer(0x5, 0x36, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000040), 0x0}, 0x20) syz_usb_control_io$uac3(r6, &(0x7f0000000740)={0x14, &(0x7f00000000c0)={0x20, 0xe, 0x17, {0x17, 0x69, "d3da168e650054e923bd6b66309aad953f2319bd41"}}, 0x0}, 0x0) 2.466042551s ago: executing program 8 (id=2411): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=@dstopts={0x2b}, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x3a) 2.423594656s ago: executing program 6 (id=2412): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r0, 0x400}, {r0, 0x103}, {r0, 0x201}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x8d]}, 0x8) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000001c0)={0x9d0000, 0xb0b, 0x0, r0, 0x0, &(0x7f0000000180)={0x9909de, 0x7, '\x00', @ptr=0xffffffffffffffff}}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) pipe(0x0) socketpair(0x15, 0x6, 0x41, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000480)={{0x0, @name="8f6879f69b4d914c7ca1165f70fc292ec0c8d249740d1d02981ff0be7e77b8a5"}, 0x8, 0x9, 0x4e6}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000004c0)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000500)=0x23d, 0x4) r4 = syz_open_dev$radio(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000600)={0xfffffff, 0x5, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x980926, 0xff, '\x00', @p_u8=&(0x7f0000000580)}}) 1.951703317s ago: executing program 8 (id=2413): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10b541, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x365a237c, 0x800000, 0x15, "0062ba7d8200000804000000000000fffeff00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x6, 0x1a, 0x0, 0x20000000) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='\xe0\x0e\xb3O\xf1J\xf7N\x1c\\\x10\xecg\xb4\xe9\xae\x15\xe6\xf9\x8e\xee\a(\\)\x8c-Y\xd6\\t\xde\x89\xcf\xb5\b\x8e|\xd0\xf5\xa2Qf\xeb\x8eJ\xd5V\xfa[3\xb4\xac\x00\x00+\x15\xbf\xc3\x16?.\x92x\x177\x03rJ\xb3P}\x84\x85SIV\f\xdd\x93\x00\x12\xaeQ\xf1\xbf\xbdt\x85\xab\xfea\x96\b\xc6\x05\tC\x00~\x01\xb0\x9eH5\x8fB\xd4F\xd5\xd2\xb2\xea\xa2\x99\xcd%\x92:\xc6*\x976\n`\xc71/\xa2\xd1\xa5\xd3\xbfN\x952\x9c\x99Y;\xef\xe1\xdc\xbf\xfb\x1c\x9c\x13\x9d\x9d\xa1;\x00\x1e_\xadg|\xb7q6\x84\b\x80\xa00\xd81U\x1eXw\xa8\x9f{k\x8e\xb4\xaci\x82i2\xa3\xb2Mi\xb2e\xb8,0u\x1c\x82p\xe1K\x05\x8e\xbc\x04\x8d\xdaA\x04gr\x885\x14\x9c\a.j\xbe\xe4\xd9B\x88\x89') openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 576.613444ms ago: executing program 6 (id=2414): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="dc01000000020103000000000000000007000010c8000a800800014000000000780002800c000280050001003a0000000c000280050001007a000000060003400004000014000180080001007f00000108000200e00000012c00018014000300ff0200000000000000000000000000011400000000000e0000000000000000000000000106000340000200000c00028005000100210000000800014000000000000180080001000a0100ff08000200ac1414aa060003400002000600010040000100000c0002800500010011000000080001400000000100010a803400028014000180080041006401010008000200e0000002060003400104000014000180080001007f00000108000200ffffffff080001400000000008000140000000016c0002800c000280050001002f0000000c0002800534d4be0001008400000006000340000400000c00028005000100210000001400018008000100ac14141708000200000101000c0002800500010084000000060003400001000006000340000100000c00028005000100110000004c0002801400018008000100ac1e010108000200e00000010c000280050001002e0000000c0002800500010084000000060003400001000006000340000200000c00028005000100010000000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x40045010, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0800430506000500000014000000000f"], 0x1200) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xfffffffffffffda6, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x2000841) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0xffffffff, 0x6, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, 0xffffffffffffffff, 0x56b300) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x305040, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0xffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0x5, 0x5, 0x3ffd, 0x7}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x56, 0x8000, 0xfffd, {}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x82341) chroot(&(0x7f0000000200)='./file0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 8 (id=2415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}]]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x4040000) kernel console output (not intermixed with test programs): ig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1262.097086][ T36] audit: type=1326 audit(1779533965.456:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14283 comm="syz.3.1990" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1262.097137][ T36] audit: type=1326 audit(1779533965.456:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14283 comm="syz.3.1990" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1262.097576][ T36] audit: type=1326 audit(1779533965.456:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14283 comm="syz.3.1990" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1262.097631][ T36] audit: type=1326 audit(1779533965.456:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14283 comm="syz.3.1990" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1262.799436][ T5849] usb 9-1: device descriptor read/8, error -71 [ 1266.751277][T14324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1266.767002][T14324] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2002'. [ 1268.958435][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 1268.958456][ T36] audit: type=1326 audit(1779533972.511:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14325 comm="syz.8.2012" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1268.958621][ T36] audit: type=1326 audit(1779533972.511:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14325 comm="syz.8.2012" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1268.958676][ T36] audit: type=1326 audit(1779533972.511:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14325 comm="syz.8.2012" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1268.959559][ T36] audit: type=1326 audit(1779533972.511:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14325 comm="syz.8.2012" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1268.959615][ T36] audit: type=1326 audit(1779533972.521:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14325 comm="syz.8.2012" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1268.959670][ T36] audit: type=1326 audit(1779533972.521:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14325 comm="syz.8.2012" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1268.959724][ T36] audit: type=1326 audit(1779533972.521:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14325 comm="syz.8.2012" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1268.959791][ T36] audit: type=1326 audit(1779533972.521:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14325 comm="syz.8.2012" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1268.959851][ T36] audit: type=1326 audit(1779533972.521:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14325 comm="syz.8.2012" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1268.959933][ T36] audit: type=1326 audit(1779533972.521:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14325 comm="syz.8.2012" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1269.579420][T14345] IPVS: stopping master sync thread 11929 ... [ 1273.254436][T14365] FAULT_INJECTION: forcing a failure. [ 1273.254436][T14365] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.254478][T14365] CPU: 1 UID: 0 PID: 14365 Comm: syz.3.2023 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1273.254509][T14365] Tainted: [L]=SOFTLOCKUP [ 1273.254518][T14365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1273.254532][T14365] Call Trace: [ 1273.254541][T14365] [ 1273.254551][T14365] dump_stack_lvl+0xe8/0x150 [ 1273.254584][T14365] should_fail_ex+0x46b/0x600 [ 1273.254617][T14365] should_failslab+0xa8/0x100 [ 1273.254647][T14365] __kmalloc_noprof+0xdf/0x7b0 [ 1273.254675][T14365] ? sk_prot_alloc+0xe7/0x210 [ 1273.254705][T14365] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1273.254737][T14365] sk_prot_alloc+0xe7/0x210 [ 1273.254765][T14365] ? sk_alloc+0x27/0x390 [ 1273.254798][T14365] sk_alloc+0x3a/0x390 [ 1273.254833][T14365] __netlink_create+0x65/0x260 [ 1273.254869][T14365] ? __pfx_genl_release+0x10/0x10 [ 1273.254892][T14365] netlink_create+0x3be/0x580 [ 1273.254925][T14365] ? __pfx_genl_unbind+0x10/0x10 [ 1273.254945][T14365] ? __pfx_genl_bind+0x10/0x10 [ 1273.254969][T14365] __sock_create+0x4b2/0x9d0 [ 1273.255005][T14365] __sys_socket+0xd6/0x1b0 [ 1273.255032][T14365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.255064][T14365] __x64_sys_socket+0x7a/0x90 [ 1273.255091][T14365] do_syscall_64+0x15f/0xf80 [ 1273.255122][T14365] ? trace_irq_disable+0x3b/0x140 [ 1273.255149][T14365] ? clear_bhb_loop+0x40/0x90 [ 1273.255178][T14365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.255202][T14365] RIP: 0033:0x7f9a9582e6c7 [ 1273.255223][T14365] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.255242][T14365] RSP: 002b:00007f9a93a7cf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1273.255265][T14365] RAX: ffffffffffffffda RBX: 00007f9a95aa5fa0 RCX: 00007f9a9582e6c7 [ 1273.255282][T14365] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1273.255295][T14365] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1273.255311][T14365] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000001 [ 1273.255326][T14365] R13: 00007f9a95aa6038 R14: 00007f9a95aa5fa0 R15: 00007fff7b423768 [ 1273.255361][T14365] [ 1273.876749][T14370] netlink: 'syz.3.2026': attribute type 2 has an invalid length. [ 1274.267677][ T1255] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1274.330865][T14376] FAULT_INJECTION: forcing a failure. [ 1274.330865][T14376] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.330901][T14376] CPU: 1 UID: 0 PID: 14376 Comm: syz.3.2029 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1274.330930][T14376] Tainted: [L]=SOFTLOCKUP [ 1274.330939][T14376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1274.330952][T14376] Call Trace: [ 1274.330961][T14376] [ 1274.330972][T14376] dump_stack_lvl+0xe8/0x150 [ 1274.331004][T14376] should_fail_ex+0x46b/0x600 [ 1274.331036][T14376] should_failslab+0xa8/0x100 [ 1274.331066][T14376] kmem_cache_alloc_noprof+0x87/0x680 [ 1274.331092][T14376] ? security_inode_alloc+0x39/0x310 [ 1274.331134][T14376] security_inode_alloc+0x39/0x310 [ 1274.331162][T14376] inode_init_always_gfp+0x99a/0xd50 [ 1274.331203][T14376] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1274.331228][T14376] alloc_inode+0x82/0x1b0 [ 1274.331262][T14376] sock_create_lite+0x8b/0x510 [ 1274.331288][T14376] ? sctp_id2assoc+0x1cf/0x260 [ 1274.331321][T14376] sctp_getsockopt_peeloff_common+0x1fe/0x5f0 [ 1274.331360][T14376] ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10 [ 1274.331407][T14376] sctp_getsockopt_peeloff_flags+0x14b/0x240 [ 1274.331434][T14376] ? __local_bh_enable+0x1e1/0x2f0 [ 1274.331463][T14376] ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10 [ 1274.331493][T14376] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1274.331518][T14376] ? lockdep_hardirqs_on+0x7a/0x110 [ 1274.331555][T14376] sctp_getsockopt+0x3a5/0xb90 [ 1274.331586][T14376] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1274.331611][T14376] do_sock_getsockopt+0x51d/0x7e0 [ 1274.331646][T14376] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1274.331690][T14376] ? __fget_files+0x3a6/0x420 [ 1274.331763][T14376] ? __fget_files+0x2a/0x420 [ 1274.331791][T14376] __x64_sys_getsockopt+0x1aa/0x250 [ 1274.331828][T14376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.331853][T14376] do_syscall_64+0x15f/0xf80 [ 1274.331883][T14376] ? trace_irq_disable+0x3b/0x140 [ 1274.331909][T14376] ? clear_bhb_loop+0x40/0x90 [ 1274.331939][T14376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.331963][T14376] RIP: 0033:0x7f9a9582ce59 [ 1274.331984][T14376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.332004][T14376] RSP: 002b:00007f9a93a7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1274.332029][T14376] RAX: ffffffffffffffda RBX: 00007f9a95aa5fa0 RCX: 00007f9a9582ce59 [ 1274.332046][T14376] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 1274.332060][T14376] RBP: 00007f9a93a7e090 R08: 0000200000000000 R09: 0000000000000000 [ 1274.332075][T14376] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1274.332094][T14376] R13: 00007f9a95aa6038 R14: 00007f9a95aa5fa0 R15: 00007fff7b423768 [ 1274.332166][T14376] [ 1274.598113][ T1255] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1274.598147][ T1255] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.598168][ T1255] usb 9-1: Product: 풘墪速㓼矈ﻻﯦ␐寯ᇆ㎚繶등さ틢뱋퇿헱၈ [ 1274.598195][ T1255] usb 9-1: Manufacturer: 䙔㩘똌憇銲쪳鸌ୠ茑瞩윷鿞≯㬭䨹兢䚉䎔倝㖍ᴈ⯳蝖樹׬ổ릌ឲᴾ瘍㛈෪ [ 1275.491457][ T1255] usb 9-1: unit 2 not found! [ 1275.491486][ T1255] usb 9-1: unit 1: unexpected type 0x0c [ 1275.516915][T14383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.519575][T14383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.165534][ T1255] usb 9-1: USB disconnect, device number 17 [ 1277.405978][T12758] udevd[12758]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.653950][ T7824] hid (null): global environment stack underflow [ 1277.693251][ T7824] hid-generic 0002:0000:0000.0009: global environment stack underflow [ 1277.693276][ T7824] hid-generic 0002:0000:0000.0009: item 0 2 1 11 parsing failed [ 1277.694012][ T7824] hid-generic 0002:0000:0000.0009: probe with driver hid-generic failed with error -22 [ 1279.909376][ T7824] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1281.190222][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 1281.190246][ T36] audit: type=1326 audit(1779533984.972:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14422 comm="syz.9.2040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1281.190302][ T36] audit: type=1326 audit(1779533984.982:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14422 comm="syz.9.2040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1281.190352][ T36] audit: type=1326 audit(1779533984.982:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14422 comm="syz.9.2040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1281.190412][ T36] audit: type=1326 audit(1779533984.993:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14422 comm="syz.9.2040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1281.190463][ T36] audit: type=1326 audit(1779533984.993:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14422 comm="syz.9.2040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1281.190514][ T36] audit: type=1326 audit(1779533984.993:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14422 comm="syz.9.2040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1281.190565][ T36] audit: type=1326 audit(1779533985.003:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14422 comm="syz.9.2040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1281.190617][ T36] audit: type=1326 audit(1779533985.003:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14422 comm="syz.9.2040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1281.190668][ T36] audit: type=1326 audit(1779533985.014:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14422 comm="syz.9.2040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1281.190721][ T36] audit: type=1326 audit(1779533985.014:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14422 comm="syz.9.2040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1281.224436][ T7824] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1281.224467][ T7824] usb 9-1: config 0 has no interface number 0 [ 1281.224519][ T7824] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1282.150504][ T7824] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1282.150542][ T7824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.242089][ T7824] usb 9-1: config 0 descriptor?? [ 1282.242699][ T7824] usb 9-1: can't set config #0, error -71 [ 1282.246064][ T7824] usb 9-1: USB disconnect, device number 18 [ 1282.356507][T14427] FAULT_INJECTION: forcing a failure. [ 1282.356507][T14427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1282.356568][T14427] CPU: 0 UID: 0 PID: 14427 Comm: syz.6.2042 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1282.356608][T14427] Tainted: [L]=SOFTLOCKUP [ 1282.356615][T14427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1282.356625][T14427] Call Trace: [ 1282.356632][T14427] [ 1282.356639][T14427] dump_stack_lvl+0xe8/0x150 [ 1282.356664][T14427] should_fail_ex+0x46b/0x600 [ 1282.356685][T14427] _copy_from_iter+0x1d3/0x1670 [ 1282.356708][T14427] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1282.356726][T14427] ? __alloc_skb+0x27d/0x7d0 [ 1282.356746][T14427] ? __pfx__copy_from_iter+0x10/0x10 [ 1282.356762][T14427] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1282.356780][T14427] ? __alloc_skb+0x27d/0x7d0 [ 1282.356807][T14427] ? netlink_sendmsg+0x650/0xb40 [ 1282.356829][T14427] ? skb_put+0x11b/0x210 [ 1282.356852][T14427] netlink_sendmsg+0x6c0/0xb40 [ 1282.356880][T14427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.356903][T14427] ? unwind_get_return_address+0x4d/0x90 [ 1282.356928][T14427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1282.356947][T14427] ____sys_sendmsg+0x94c/0x9c0 [ 1282.356974][T14427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1282.357003][T14427] ? import_iovec+0x73/0xa0 [ 1282.357025][T14427] ___sys_sendmsg+0x2a5/0x360 [ 1282.357046][T14427] ? __lock_acquire+0x6b5/0x2cf0 [ 1282.357071][T14427] ? __pfx____sys_sendmsg+0x10/0x10 [ 1282.357119][T14427] ? __fget_files+0x2a/0x420 [ 1282.357133][T14427] ? __fget_files+0x3a6/0x420 [ 1282.357155][T14427] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1282.357180][T14427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1282.357211][T14427] ? __pfx_ksys_write+0x10/0x10 [ 1282.357237][T14427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.357255][T14427] do_syscall_64+0x15f/0xf80 [ 1282.357277][T14427] ? trace_irq_disable+0x3b/0x140 [ 1282.357296][T14427] ? clear_bhb_loop+0x40/0x90 [ 1282.357320][T14427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.357345][T14427] RIP: 0033:0x7fd83218ce59 [ 1282.357360][T14427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.357373][T14427] RSP: 002b:00007fd8303e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.357390][T14427] RAX: ffffffffffffffda RBX: 00007fd832405fa0 RCX: 00007fd83218ce59 [ 1282.357402][T14427] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1282.357412][T14427] RBP: 00007fd8303e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.357423][T14427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.357432][T14427] R13: 00007fd832406038 R14: 00007fd832405fa0 R15: 00007ffd2307d768 [ 1282.357457][T14427] [ 1284.326793][ T7824] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1284.470102][ T7824] usb 9-1: Using ep0 maxpacket: 32 [ 1284.505031][ T7824] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1284.505063][ T7824] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1284.505087][ T7824] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1284.505111][ T7824] usb 9-1: config 1 has no interface number 0 [ 1284.505175][ T7824] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1284.505318][ T7824] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1284.505378][ T7824] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1284.505404][ T7824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.613900][ T7824] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1284.814416][ T7824] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 1285.223161][T10242] usb 9-1: USB disconnect, device number 19 [ 1285.278290][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1285.354764][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1285.359797][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1285.380161][T10242] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1285.399568][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1285.401986][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1287.108322][T10242] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1287.259065][T10242] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1287.259098][T10242] usb 9-1: config 0 has no interface number 0 [ 1287.259150][T10242] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1287.313158][T10242] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1287.313195][T10242] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.313220][T10242] usb 9-1: Product: syz [ 1287.313237][T10242] usb 9-1: Manufacturer: syz [ 1287.313254][T10242] usb 9-1: SerialNumber: syz [ 1287.403493][T11290] Bluetooth: hci5: command tx timeout [ 1287.486381][T14448] lo speed is unknown, defaulting to 1000 [ 1287.540769][T10242] usb 9-1: config 0 descriptor?? [ 1288.711214][T10242] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1288.711492][T10242] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1288.880885][T10242] usb 9-1: USB disconnect, device number 20 [ 1288.992591][T14448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.992723][T14448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.992992][T14448] bridge_slave_0: entered allmulticast mode [ 1289.015258][T14448] bridge_slave_0: entered promiscuous mode [ 1289.019659][T14448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.019934][T14448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.020145][T14448] bridge_slave_1: entered allmulticast mode [ 1289.049392][T14448] bridge_slave_1: entered promiscuous mode [ 1289.267282][T14448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.292847][T14448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.378019][T11290] Bluetooth: hci5: command tx timeout [ 1289.431853][T14448] team0: Port device team_slave_0 added [ 1289.446155][T14448] team0: Port device team_slave_1 added [ 1289.558883][T14448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.558898][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.558920][T14448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.637438][T14448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.637457][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.637490][T14448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.907487][T14448] hsr_slave_0: entered promiscuous mode [ 1289.919057][T14448] hsr_slave_1: entered promiscuous mode [ 1289.959745][T14448] debugfs: 'hsr0' already exists in 'hsr' [ 1289.959776][T14448] Cannot create hsr debugfs directory [ 1290.750513][ T5858] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1291.342423][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2066'. [ 1291.366113][T11290] Bluetooth: hci5: command tx timeout [ 1291.500985][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1291.501046][ T5858] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1291.501073][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.578849][ T5858] usb 4-1: config 0 descriptor?? [ 1291.579728][T14517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1292.010160][ T5858] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 1292.010199][ T5858] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 1292.010229][ T5858] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 1292.010258][ T5858] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 1292.010287][ T5858] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 1292.010315][ T5858] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 1292.010343][ T5858] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 1292.010371][ T5858] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 1292.010400][ T5858] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 1292.010427][ T5858] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 1292.193612][ T5858] asus 0003:0B05:1ABE.000A: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.3-1/input0 [ 1292.429746][ T5858] usb 4-1: USB disconnect, device number 54 [ 1292.647647][ T1255] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1292.709483][T14537] fido_id[14537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1292.789294][ T1255] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1292.789324][ T1255] usb 7-1: config 0 has no interface number 0 [ 1292.789371][ T1255] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1292.822439][ T1255] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1292.822470][ T1255] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.822490][ T1255] usb 7-1: Product: syz [ 1292.822534][ T1255] usb 7-1: Manufacturer: syz [ 1292.822548][ T1255] usb 7-1: SerialNumber: syz [ 1292.914321][ T1255] usb 7-1: config 0 descriptor?? [ 1292.975504][T14541] fuse: Bad value for 'max_read' [ 1293.339765][T11290] Bluetooth: hci5: command tx timeout [ 1296.019673][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1296.019846][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1296.729027][ T5730] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1296.860366][ T1255] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1296.860652][ T1255] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1296.888207][ T5730] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1296.888237][ T5730] usb 4-1: config 0 has no interface number 0 [ 1296.888287][ T5730] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1296.912901][ T5730] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1296.912934][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.912953][ T5730] usb 4-1: Product: syz [ 1296.912966][ T5730] usb 4-1: Manufacturer: syz [ 1296.912979][ T5730] usb 4-1: SerialNumber: syz [ 1296.984666][ T5730] usb 4-1: config 0 descriptor?? [ 1297.100927][ T1255] usb 7-1: USB disconnect, device number 46 [ 1297.516515][ T5730] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1297.516833][ T5730] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1297.559802][ T5730] usb 4-1: USB disconnect, device number 55 [ 1298.037918][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 1298.037941][ T36] audit: type=1326 audit(1779534003.291:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.6.2076" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd83218ce59 code=0x0 [ 1299.603532][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2078'. [ 1300.604357][ T1255] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1300.789964][ T1255] usb 7-1: device descriptor read/64, error -71 [ 1300.995784][T14583] fuse: Bad value for 'max_read' [ 1301.195484][ T1255] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 1301.322773][ T1255] usb 7-1: device descriptor read/64, error -71 [ 1301.431492][ T1255] usb usb7-port1: attempt power cycle [ 1304.702629][T13939] bridge_slave_1: left allmulticast mode [ 1304.702668][T13939] bridge_slave_1: left promiscuous mode [ 1304.702962][T13939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.901525][T13939] bridge_slave_0: left allmulticast mode [ 1304.901562][T13939] bridge_slave_0: left promiscuous mode [ 1304.917865][T13939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.380888][ T36] audit: type=1326 audit(1779534010.870:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1305.381002][ T36] audit: type=1326 audit(1779534010.881:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1305.381061][ T36] audit: type=1326 audit(1779534010.881:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1305.381112][ T36] audit: type=1326 audit(1779534010.881:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1305.381443][ T36] audit: type=1326 audit(1779534010.881:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1305.381786][ T36] audit: type=1326 audit(1779534010.881:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1305.382153][ T36] audit: type=1326 audit(1779534010.881:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1305.382529][ T36] audit: type=1326 audit(1779534010.881:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1305.382811][ T36] audit: type=1326 audit(1779534010.881:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1305.383144][ T36] audit: type=1326 audit(1779534010.881:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f530bfdce59 code=0x7ffc0000 [ 1308.668705][T14647] fuse: Bad value for 'max_read' [ 1310.937292][T14649] uprobe: syz.8.2092:14649 failed to unregister, leaking uprobe [ 1311.801911][T13939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.859784][T13939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.875882][T13939] bond0 (unregistering): Released all slaves [ 1311.894423][ T7824] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1311.942577][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1312.075090][ T7824] usb 10-1: Using ep0 maxpacket: 32 [ 1312.090391][ T7824] usb 10-1: config 0 has no interfaces? [ 1312.098393][ T7824] usb 10-1: New USB device found, idVendor=0499, idProduct=1037, bcdDevice= 0.40 [ 1312.098428][ T7824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.098451][ T7824] usb 10-1: Product: syz [ 1312.098467][ T7824] usb 10-1: Manufacturer: syz [ 1312.098491][ T7824] usb 10-1: SerialNumber: syz [ 1312.152708][ T7824] usb 10-1: config 0 descriptor?? [ 1312.431606][T14659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.432722][T14659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.434460][T14659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.435026][T14659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.530833][ T10] usb 10-1: USB disconnect, device number 14 [ 1315.562841][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2102'. [ 1316.025079][T14687] bond0: option arp_all_targets: invalid value (18446744071991780800) [ 1316.644548][T14709] fuse: Bad value for 'max_read' [ 1319.009702][T14723] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1322.545106][T13939] hsr_slave_0: left promiscuous mode [ 1322.584513][T13939] hsr_slave_1: left promiscuous mode [ 1322.585414][T13939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.646091][T13939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.772356][T14753] FAULT_INJECTION: forcing a failure. [ 1322.772356][T14753] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.772398][T14753] CPU: 0 UID: 0 PID: 14753 Comm: syz.9.2115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1322.772429][T14753] Tainted: [L]=SOFTLOCKUP [ 1322.772438][T14753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1322.772454][T14753] Call Trace: [ 1322.772464][T14753] [ 1322.772474][T14753] dump_stack_lvl+0xe8/0x150 [ 1322.772507][T14753] should_fail_ex+0x46b/0x600 [ 1322.772539][T14753] should_failslab+0xa8/0x100 [ 1322.772568][T14753] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 1322.772598][T14753] ? is_bpf_text_address+0x26/0x2b0 [ 1322.772629][T14753] ? __get_vm_area_node+0x171/0x350 [ 1322.772660][T14753] __get_vm_area_node+0x171/0x350 [ 1322.772691][T14753] __vmalloc_node_range_noprof+0x36a/0x1750 [ 1322.772718][T14753] ? vicodec_start_streaming+0x76e/0x1220 [ 1322.772749][T14753] ? unwind_get_return_address+0x4d/0x90 [ 1322.772818][T14753] ? __asan_memset+0x22/0x50 [ 1322.772853][T14753] ? __alloc_frozen_pages_noprof+0xac/0x380 [ 1322.772894][T14753] ? kasan_save_free_info+0x46/0x50 [ 1322.773054][T14753] ? stack_depot_save_flags+0x33/0x810 [ 1322.773084][T14753] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1322.773113][T14753] ? rcu_is_watching+0x15/0xb0 [ 1322.773150][T14753] ? rcu_is_watching+0x15/0xb0 [ 1322.773189][T14753] __kvmalloc_node_noprof+0x453/0x8e0 [ 1322.773219][T14753] ? vicodec_start_streaming+0x76e/0x1220 [ 1322.773252][T14753] ? vicodec_start_streaming+0x76e/0x1220 [ 1322.773290][T14753] vicodec_start_streaming+0x76e/0x1220 [ 1322.773329][T14753] ? __pfx_vicodec_start_streaming+0x10/0x10 [ 1322.773362][T14753] vb2_start_streaming+0x128/0x460 [ 1322.773402][T14753] vb2_core_streamon+0x2e0/0x4f0 [ 1322.773442][T14753] v4l2_m2m_ioctl_streamon+0xe3/0x140 [ 1322.773479][T14753] __video_do_ioctl+0xade/0xca0 [ 1322.773523][T14753] ? __pfx___video_do_ioctl+0x10/0x10 [ 1322.773574][T14753] video_usercopy+0x876/0x1450 [ 1322.773621][T14753] ? __pfx___video_do_ioctl+0x10/0x10 [ 1322.773658][T14753] ? __pfx_video_usercopy+0x10/0x10 [ 1322.773693][T14753] ? smack_file_ioctl+0x263/0x360 [ 1322.773741][T14753] ? __fget_files+0x2a/0x420 [ 1322.773763][T14753] ? __fget_files+0x3a6/0x420 [ 1322.773789][T14753] v4l2_ioctl+0x190/0x1e0 [ 1322.773823][T14753] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1322.773854][T14753] __se_sys_ioctl+0xff/0x170 [ 1322.773885][T14753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.773926][T14753] do_syscall_64+0x15f/0xf80 [ 1322.773958][T14753] ? trace_irq_disable+0x3b/0x140 [ 1322.773987][T14753] ? clear_bhb_loop+0x40/0x90 [ 1322.774017][T14753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.774041][T14753] RIP: 0033:0x7feaf6bece59 [ 1322.774065][T14753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.774086][T14753] RSP: 002b:00007feaf4e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1322.774112][T14753] RAX: ffffffffffffffda RBX: 00007feaf6e65fa0 RCX: 00007feaf6bece59 [ 1322.774130][T14753] RDX: 0000200000000240 RSI: 0000000040045612 RDI: 0000000000000003 [ 1322.774148][T14753] RBP: 00007feaf4e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.774163][T14753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.774178][T14753] R13: 00007feaf6e66038 R14: 00007feaf6e65fa0 R15: 00007ffe42314508 [ 1322.774216][T14753] [ 1322.776824][T14753] syz.9.2115: vmalloc error: size 5529600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz9,mems_allowed=0-1 [ 1322.777006][T14753] CPU: 0 UID: 0 PID: 14753 Comm: syz.9.2115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1322.777037][T14753] Tainted: [L]=SOFTLOCKUP [ 1322.777046][T14753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1322.777060][T14753] Call Trace: [ 1322.777070][T14753] [ 1322.777084][T14753] dump_stack_lvl+0xe8/0x150 [ 1322.777115][T14753] warn_alloc+0x263/0x3e0 [ 1322.777153][T14753] ? __pfx_warn_alloc+0x10/0x10 [ 1322.777181][T14753] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1322.777209][T14753] ? is_bpf_text_address+0x26/0x2b0 [ 1322.777244][T14753] ? __get_vm_area_node+0x171/0x350 [ 1322.777296][T14753] ? __get_vm_area_node+0x2e1/0x350 [ 1322.777330][T14753] __vmalloc_node_range_noprof+0x38f/0x1750 [ 1322.777355][T14753] ? unwind_get_return_address+0x4d/0x90 [ 1322.777390][T14753] ? __asan_memset+0x22/0x50 [ 1322.777430][T14753] ? __alloc_frozen_pages_noprof+0xac/0x380 [ 1322.777470][T14753] ? kasan_save_free_info+0x46/0x50 [ 1322.777504][T14753] ? stack_depot_save_flags+0x33/0x810 [ 1322.777533][T14753] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1322.777560][T14753] ? rcu_is_watching+0x15/0xb0 [ 1322.777596][T14753] ? rcu_is_watching+0x15/0xb0 [ 1322.777636][T14753] __kvmalloc_node_noprof+0x453/0x8e0 [ 1322.777663][T14753] ? vicodec_start_streaming+0x76e/0x1220 [ 1322.777696][T14753] ? vicodec_start_streaming+0x76e/0x1220 [ 1322.777735][T14753] vicodec_start_streaming+0x76e/0x1220 [ 1322.777774][T14753] ? __pfx_vicodec_start_streaming+0x10/0x10 [ 1322.777806][T14753] vb2_start_streaming+0x128/0x460 [ 1322.777847][T14753] vb2_core_streamon+0x2e0/0x4f0 [ 1322.777885][T14753] v4l2_m2m_ioctl_streamon+0xe3/0x140 [ 1322.777912][T14753] __video_do_ioctl+0xade/0xca0 [ 1322.777958][T14753] ? __pfx___video_do_ioctl+0x10/0x10 [ 1322.778015][T14753] video_usercopy+0x876/0x1450 [ 1322.778057][T14753] ? __pfx___video_do_ioctl+0x10/0x10 [ 1322.778093][T14753] ? __pfx_video_usercopy+0x10/0x10 [ 1322.778124][T14753] ? smack_file_ioctl+0x263/0x360 [ 1322.778171][T14753] ? __fget_files+0x2a/0x420 [ 1322.778193][T14753] ? __fget_files+0x3a6/0x420 [ 1322.778219][T14753] v4l2_ioctl+0x190/0x1e0 [ 1322.778253][T14753] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1322.778285][T14753] __se_sys_ioctl+0xff/0x170 [ 1322.778318][T14753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.778345][T14753] do_syscall_64+0x15f/0xf80 [ 1322.778375][T14753] ? trace_irq_disable+0x3b/0x140 [ 1322.778402][T14753] ? clear_bhb_loop+0x40/0x90 [ 1322.778431][T14753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.778454][T14753] RIP: 0033:0x7feaf6bece59 [ 1322.778473][T14753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.778504][T14753] RSP: 002b:00007feaf4e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1322.778528][T14753] RAX: ffffffffffffffda RBX: 00007feaf6e65fa0 RCX: 00007feaf6bece59 [ 1322.778546][T14753] RDX: 0000200000000240 RSI: 0000000040045612 RDI: 0000000000000003 [ 1322.778561][T14753] RBP: 00007feaf4e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.778576][T14753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.778589][T14753] R13: 00007feaf6e66038 R14: 00007feaf6e65fa0 R15: 00007ffe42314508 [ 1322.778627][T14753] [ 1322.806424][T14753] Mem-Info: [ 1322.806470][T14753] active_anon:5943 inactive_anon:28538 isolated_anon:0 [ 1322.806470][T14753] active_file:27232 inactive_file:37284 isolated_file:0 [ 1322.806470][T14753] unevictable:768 dirty:82 writeback:0 [ 1322.806470][T14753] slab_reclaimable:12922 slab_unreclaimable:121268 [ 1322.806470][T14753] mapped:32797 shmem:28199 pagetables:1828 [ 1322.806470][T14753] sec_pagetables:0 bounce:0 [ 1322.806470][T14753] kernel_misc_reclaimable:0 [ 1322.806470][T14753] free:1253157 free_pcp:4133 free_cma:0 [ 1322.806642][T14753] Node 0 active_anon:23772kB inactive_anon:114152kB active_file:108732kB inactive_file:149136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131188kB dirty:328kB writeback:0kB shmem:111260kB kernel_stack:15240kB pagetables:7168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1322.806814][T14753] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:96kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1322.806957][T14753] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1322.807127][T14753] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1322.807236][T14753] Node 0 DMA32 free:1063628kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23772kB inactive_anon:114152kB active_file:108732kB inactive_file:149136kB unevictable:1536kB writepending:328kB zspages:0kB present:3129332kB managed:2566492kB mlocked:0kB bounce:0kB free_pcp:16532kB local_pcp:8412kB free_cma:0kB [ 1322.807445][T14753] lowmem_reserve[]: 0 0 0 0 0 [ 1322.807541][T14753] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1322.807685][T14753] lowmem_reserve[]: 0 0 0 0 0 [ 1322.807785][T14753] Node 1 Normal free:3933640kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1322.812806][T14753] lowmem_reserve[]: 0 0 0 0 0 [ 1322.812937][T14753] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1322.813311][T14753] Node 0 DMA32: 2517*4kB (UM) 5036*8kB (UME) 3080*16kB (UME) 1418*32kB (UME) 1068*64kB (UME) 622*128kB (UME) 291*256kB (UME) 206*512kB (UME) 115*1024kB (UME) 49*2048kB (UME) 91*4096kB (UM) = 1063796kB [ 1322.833346][T14753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1322.833651][T14753] Node 1 Normal: 0*4kB 9*8kB (UM) 4*16kB (UM) 4*32kB (UM) 9*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (M) = 3933640kB [ 1322.834080][T14753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1322.834134][T14753] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1322.834180][T14753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1322.834268][T14753] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1322.834322][T14753] 92686 total pagecache pages [ 1322.844540][T14753] 0 pages in swap cache [ 1322.844576][T14753] Free swap = 124996kB [ 1322.844605][T14753] Total swap = 124996kB [ 1322.844629][T14753] 2097051 pages RAM [ 1322.844650][T14753] 0 pages HighMem/MovableOnly [ 1322.844665][T14753] 423760 pages reserved [ 1322.844690][T14753] 0 pages cma reserved [ 1322.981627][T14581] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1323.249980][T14581] usb 7-1: Using ep0 maxpacket: 8 [ 1323.458197][T14581] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1323.507438][T14581] usb 7-1: config 86 has an invalid interface number: 78 but max is 0 [ 1323.507469][T14581] usb 7-1: config 86 has no interface number 0 [ 1323.507515][T14581] usb 7-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1323.507541][T14581] usb 7-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 1323.507568][T14581] usb 7-1: config 86 interface 78 has no altsetting 0 [ 1323.543854][T14581] usb 7-1: string descriptor 0 read error: -22 [ 1323.544035][T14581] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 1323.544065][T14581] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.657743][T14752] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1324.687744][T14752] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1324.714223][T14581] kvaser_usb 7-1:86.78: error -EPROTO: Cannot get software info [ 1324.714467][T14581] kvaser_usb 7-1:86.78: probe with driver kvaser_usb failed with error -71 [ 1327.429446][T14765] fuse: Bad value for 'max_read' [ 1328.909733][T14581] usb 7-1: USB disconnect, device number 50 [ 1330.539897][T13939] team0 (unregistering): Port device team_slave_1 removed [ 1330.836817][ T5711] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1330.992642][ T5711] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1330.992675][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.992697][ T5711] usb 4-1: Product: 풘墪速㓼矈ﻻﯦ␐寯ᇆ㎚繶등さ틢뱋퇿헱၈ [ 1330.992717][ T5711] usb 4-1: Manufacturer: 䙔㩘똌憇銲쪳鸌ୠ茑瞩윷鿞≯㬭䨹兢䚉䎔倝㖍ᴈ⯳蝖樹׬ổ릌ឲᴾ瘍㛈෪ [ 1331.346495][ T5711] usb 4-1: unit 2 not found! [ 1331.346524][ T5711] usb 4-1: unit 1: unexpected type 0x0c [ 1331.459705][T14793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.468731][T14793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.885609][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2124'. [ 1332.002963][ T5711] usb 4-1: USB disconnect, device number 57 [ 1332.246203][T12758] udevd[12758]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1332.329388][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2125'. [ 1333.223896][T14840] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2129'. [ 1334.202808][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1334.387668][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1334.390132][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1334.390162][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1334.390187][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1334.390211][ T10] usb 4-1: config 1 has no interface number 0 [ 1334.390260][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1334.390291][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1334.390337][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1334.390363][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.640074][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1334.756696][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1334.880515][T14848] fuse: Bad value for 'max_read' [ 1335.799176][ T10] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1336.338954][T14581] usb 4-1: USB disconnect, device number 58 [ 1336.350497][T14581] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1336.493220][T14448] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1336.667473][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1336.671156][T14448] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1336.912458][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1336.913344][T14448] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1336.970896][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1336.972855][T14448] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1337.004346][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1337.457011][T14872] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2135'. [ 1337.498682][T14581] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1337.641543][T14581] usb 7-1: Using ep0 maxpacket: 32 [ 1337.842290][T14581] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1337.842322][T14581] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1337.842345][T14581] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1337.842369][T14581] usb 7-1: config 1 has no interface number 0 [ 1337.842417][T14581] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1337.842447][T14581] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1337.842493][T14581] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1337.842517][T14581] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.967492][T14581] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1338.349324][T14581] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 1338.653717][ T822] usb 7-1: USB disconnect, device number 51 [ 1338.713829][ T822] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1338.741757][T14852] hm3): entered promiscuous mode [ 1339.008513][T14448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.832701][T14448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.868285][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.868451][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.901666][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.901785][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.079963][T14885] FAULT_INJECTION: forcing a failure. [ 1340.079963][T14885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.080001][T14885] CPU: 1 UID: 0 PID: 14885 Comm: syz.9.2138 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1340.080032][T14885] Tainted: [L]=SOFTLOCKUP [ 1340.080040][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1340.080051][T14885] Call Trace: [ 1340.080060][T14885] [ 1340.080068][T14885] dump_stack_lvl+0xe8/0x150 [ 1340.080099][T14885] should_fail_ex+0x46b/0x600 [ 1340.080127][T14885] _copy_to_user+0x31/0xb0 [ 1340.080151][T14885] simple_read_from_buffer+0xe1/0x170 [ 1340.080182][T14885] proc_fail_nth_read+0x1be/0x230 [ 1340.080207][T14885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1340.080227][T14885] ? rw_verify_area+0x2ac/0x4e0 [ 1340.080251][T14885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1340.080270][T14885] vfs_read+0x212/0xa80 [ 1340.080296][T14885] ? __pfx_vfs_read+0x10/0x10 [ 1340.080317][T14885] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1340.080344][T14885] ? lockdep_hardirqs_on+0x7a/0x110 [ 1340.080367][T14885] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1340.080391][T14885] ? mutex_lock_nested+0x152/0x1d0 [ 1340.080408][T14885] ? fdget_pos+0x252/0x320 [ 1340.080431][T14885] ksys_read+0x156/0x270 [ 1340.080452][T14885] ? __pfx_ksys_read+0x10/0x10 [ 1340.080471][T14885] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1340.080503][T14885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.080523][T14885] do_syscall_64+0x15f/0xf80 [ 1340.080550][T14885] ? trace_irq_disable+0x3b/0x140 [ 1340.080571][T14885] ? clear_bhb_loop+0x40/0x90 [ 1340.080594][T14885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.080620][T14885] RIP: 0033:0x7feaf6bad68e [ 1340.080636][T14885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1340.080650][T14885] RSP: 002b:00007feaf4e3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1340.080670][T14885] RAX: ffffffffffffffda RBX: 00007feaf4e3e6c0 RCX: 00007feaf6bad68e [ 1340.080683][T14885] RDX: 000000000000000f RSI: 00007feaf4e3e0a0 RDI: 0000000000000004 [ 1340.080694][T14885] RBP: 00007feaf4e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.080704][T14885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.080714][T14885] R13: 00007feaf6e66038 R14: 00007feaf6e65fa0 R15: 00007ffe42314508 [ 1340.080741][T14885] [ 1341.055644][T14890] batadv_slave_0: entered promiscuous mode [ 1342.449447][T14909] fuse: Bad value for 'max_read' [ 1343.998259][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1344.062939][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1344.086298][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1344.101278][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1344.109847][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1344.145970][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1344.271423][ T10] usb 9-1: device descriptor read/64, error -71 [ 1344.514234][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1344.718976][ T10] usb 9-1: device descriptor read/64, error -71 [ 1344.827976][ T10] usb usb9-port1: attempt power cycle [ 1345.023661][ T5849] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1345.160467][T14934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1345.178438][T14934] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2150'. [ 1345.207956][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1345.682915][ T10] usb 9-1: device descriptor read/8, error -71 [ 1345.921978][ T10] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1345.943770][ T10] usb 9-1: device descriptor read/8, error -71 [ 1345.991711][ T5849] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1345.991760][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.991782][ T5849] usb 7-1: Product: syz [ 1345.991797][ T5849] usb 7-1: Manufacturer: syz [ 1345.991812][ T5849] usb 7-1: SerialNumber: syz [ 1346.044384][ T10] usb usb9-port1: unable to enumerate USB device [ 1346.147963][ T4916] Bluetooth: hci1: command tx timeout [ 1346.855212][T10242] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1347.069794][T10242] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1347.069827][T10242] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1347.069849][T10242] usb 4-1: Product: syz [ 1347.069865][T10242] usb 4-1: SerialNumber: syz [ 1347.132475][T10242] usb 4-1: config 0 descriptor?? [ 1347.361860][T10242] hso 4-1:0.0: Failed to find INT IN ep [ 1348.129336][ T4916] Bluetooth: hci1: command tx timeout [ 1348.189726][T14942] netlink: 'syz.3.2152': attribute type 10 has an invalid length. [ 1348.192517][ T10] usb 4-1: USB disconnect, device number 59 [ 1348.578310][ T5849] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1348.607121][ T5849] usb 7-1: USB disconnect, device number 52 [ 1348.683746][ T5849] usblp0: removed [ 1350.917890][ T4916] Bluetooth: hci1: command tx timeout [ 1351.331250][T14918] lo speed is unknown, defaulting to 1000 [ 1352.521752][T14918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.521919][T14918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.522125][T14918] bridge_slave_0: entered allmulticast mode [ 1352.524176][T14918] bridge_slave_0: entered promiscuous mode [ 1352.532009][T14918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.534256][T14918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.537575][T14918] bridge_slave_1: entered allmulticast mode [ 1352.569449][T14918] bridge_slave_1: entered promiscuous mode [ 1352.869623][T11290] Bluetooth: hci1: command tx timeout [ 1354.247646][T14918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.810006][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1357.810071][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1357.889198][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2168'. [ 1357.890997][T14918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.891399][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2168'. [ 1358.222048][T14918] team0: Port device team_slave_0 added [ 1358.238530][T14918] team0: Port device team_slave_1 added [ 1358.322101][T14918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.322116][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.322137][T14918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.329589][T14918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.329604][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.329625][T14918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.591967][T14918] hsr_slave_0: entered promiscuous mode [ 1358.593105][T14918] hsr_slave_1: entered promiscuous mode [ 1358.593936][T14918] debugfs: 'hsr0' already exists in 'hsr' [ 1358.593958][T14918] Cannot create hsr debugfs directory [ 1359.886256][ T5711] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1360.067400][ T5711] usb 10-1: device descriptor read/64, error -71 [ 1360.321105][ T5711] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1360.455662][ T5711] usb 10-1: device descriptor read/64, error -71 [ 1360.561480][ T5711] usb usb10-port1: attempt power cycle [ 1361.972648][ T5711] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1362.001839][ T5711] usb 10-1: device descriptor read/8, error -71 [ 1362.338364][T15049] fuse: Bad value for 'max_read' [ 1362.581280][T15051] Bluetooth: MGMT ver 1.23 [ 1363.016990][T13939] bridge_slave_1: left allmulticast mode [ 1363.017029][T13939] bridge_slave_1: left promiscuous mode [ 1363.017325][T13939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.215004][T13939] bridge_slave_0: left allmulticast mode [ 1363.215035][T13939] bridge_slave_0: left promiscuous mode [ 1363.215227][T13939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.470320][T15069] fuse: Bad value for 'max_read' [ 1365.930155][T15072] 9pnet: p9_errstr2errno: server reported unknown error  [ 1368.032819][T13939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.085561][T14870] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1368.105432][T13939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.128150][T13939] bond0 (unregistering): Released all slaves [ 1368.304606][T14870] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1368.304635][T14870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.304657][T14870] usb 4-1: Product: 풘墪速㓼矈ﻻﯦ␐寯ᇆ㎚繶등さ틢뱋퇿헱၈ [ 1368.304675][T14870] usb 4-1: Manufacturer: 䙔㩘똌憇銲쪳鸌ୠ茑瞩윷鿞≯㬭䨹兢䚉䎔倝㖍ᴈ⯳蝖樹׬ổ릌ឲᴾ瘍㛈෪ [ 1368.512545][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1368.549318][T14870] usb 4-1: unit 2 not found! [ 1368.549343][T14870] usb 4-1: unit 1: unexpected type 0x0c [ 1368.741034][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.754519][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.858791][T13934] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1368.858847][T13934] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1368.858896][T13934] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1368.858937][T13934] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1369.321977][T14870] usb 4-1: USB disconnect, device number 60 [ 1371.384248][T12758] udevd[12758]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1372.198951][T13939] hsr_slave_0: left promiscuous mode [ 1372.233589][T13939] hsr_slave_1: left promiscuous mode [ 1372.237067][T13939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.275069][T13939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.772664][T11290] Bluetooth: hci4: unexpected event for opcode 0x4889 [ 1372.982386][T15124] FAULT_INJECTION: forcing a failure. [ 1372.982386][T15124] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.982421][T15124] CPU: 1 UID: 0 PID: 15124 Comm: syz.8.2198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1372.982445][T15124] Tainted: [L]=SOFTLOCKUP [ 1372.982451][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1372.982461][T15124] Call Trace: [ 1372.982468][T15124] [ 1372.982476][T15124] dump_stack_lvl+0xe8/0x150 [ 1372.982502][T15124] should_fail_ex+0x46b/0x600 [ 1372.982526][T15124] should_failslab+0xa8/0x100 [ 1372.982549][T15124] __kmalloc_cache_noprof+0x84/0x690 [ 1372.982570][T15124] ? vhost_task_create+0x123/0x380 [ 1372.982731][T15124] vhost_task_create+0x123/0x380 [ 1372.982761][T15124] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1372.982788][T15124] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1372.982814][T15124] ? __pfx_vhost_task_create+0x10/0x10 [ 1372.982846][T15124] ? __pfx_vhost_task_fn+0x10/0x10 [ 1372.982874][T15124] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1372.982900][T15124] ? lockdep_hardirqs_on+0x7a/0x110 [ 1372.982924][T15124] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1372.982952][T15124] ? mutex_lock_nested+0x152/0x1d0 [ 1372.982971][T15124] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 1372.983001][T15124] kvm_mmu_post_init_vm+0x147/0x2d0 [ 1372.983031][T15124] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1372.983065][T15124] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1372.983087][T15124] ? do_raw_spin_lock+0x12b/0x2f0 [ 1372.983118][T15124] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1372.983142][T15124] ? lockdep_hardirqs_on+0x7a/0x110 [ 1372.983164][T15124] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1372.983188][T15124] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1372.983213][T15124] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1372.983233][T15124] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1372.983258][T15124] ? lockdep_hardirqs_on+0x7a/0x110 [ 1372.983283][T15124] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1372.983308][T15124] ? rt_write_unlock+0x190/0x230 [ 1372.983330][T15124] kvm_vcpu_ioctl+0xa65/0xfe0 [ 1372.983364][T15124] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1372.983395][T15124] ? __asan_memset+0x22/0x50 [ 1372.983424][T15124] ? smack_file_ioctl+0x331/0x360 [ 1372.983450][T15124] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1372.983484][T15124] ? __fget_files+0x2a/0x420 [ 1372.983501][T15124] ? __fget_files+0x3a6/0x420 [ 1372.983517][T15124] ? __fget_files+0x2a/0x420 [ 1372.983536][T15124] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1372.983559][T15124] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1372.983585][T15124] __se_sys_ioctl+0xff/0x170 [ 1372.983619][T15124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.983641][T15124] do_syscall_64+0x15f/0xf80 [ 1372.983665][T15124] ? trace_irq_disable+0x3b/0x140 [ 1372.983686][T15124] ? clear_bhb_loop+0x40/0x90 [ 1372.983709][T15124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.983728][T15124] RIP: 0033:0x7f530bfdce59 [ 1372.983746][T15124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.983761][T15124] RSP: 002b:00007f530a215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1372.983781][T15124] RAX: ffffffffffffffda RBX: 00007f530c256090 RCX: 00007f530bfdce59 [ 1372.983795][T15124] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1372.983807][T15124] RBP: 00007f530a215090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.983818][T15124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.983829][T15124] R13: 00007f530c256128 R14: 00007f530c256090 R15: 00007ffd79da3458 [ 1372.983860][T15124] [ 1375.547172][T13939] team0 (unregistering): Port device team_slave_1 removed [ 1375.640601][T13939] team0 (unregistering): Port device team_slave_0 removed [ 1376.028418][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1376.126018][T14870] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1376.325144][T14870] usb 10-1: Using ep0 maxpacket: 16 [ 1376.342517][T14870] usb 10-1: config 166 has an invalid interface number: 177 but max is 1 [ 1376.342548][T14870] usb 10-1: config 166 has an invalid interface number: 34 but max is 1 [ 1376.342572][T14870] usb 10-1: config 166 has no interface number 0 [ 1376.342590][T14870] usb 10-1: config 166 has no interface number 1 [ 1376.342651][T14870] usb 10-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1376.342676][T14870] usb 10-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1376.342717][T14870] usb 10-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1376.342746][T14870] usb 10-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1376.342776][T14870] usb 10-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1376.342806][T14870] usb 10-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1376.342833][T14870] usb 10-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1376.342862][T14870] usb 10-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1376.342887][T14870] usb 10-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1376.342915][T14870] usb 10-1: config 166 interface 177 has no altsetting 0 [ 1376.342935][T14870] usb 10-1: config 166 interface 34 has no altsetting 0 [ 1376.348049][T14870] usb 10-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1376.348084][T14870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.348108][T14870] usb 10-1: Product: syz [ 1376.348124][T14870] usb 10-1: Manufacturer: syz [ 1376.348142][T14870] usb 10-1: SerialNumber: syz [ 1376.592972][T15147] FAULT_INJECTION: forcing a failure. [ 1376.592972][T15147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.593121][T15147] CPU: 1 UID: 0 PID: 15147 Comm: syz.8.2204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1376.593154][T15147] Tainted: [L]=SOFTLOCKUP [ 1376.593162][T15147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1376.593176][T15147] Call Trace: [ 1376.593185][T15147] [ 1376.593199][T15147] dump_stack_lvl+0xe8/0x150 [ 1376.593231][T15147] should_fail_ex+0x46b/0x600 [ 1376.593262][T15147] _copy_from_user+0x2d/0xb0 [ 1376.593290][T15147] ___sys_recvmsg+0x175/0x590 [ 1376.593331][T15147] ? __pfx____sys_recvmsg+0x10/0x10 [ 1376.593368][T15147] ? __fget_files+0x2a/0x420 [ 1376.593432][T15147] do_recvmmsg+0x33a/0x800 [ 1376.593476][T15147] ? __pfx_do_recvmmsg+0x10/0x10 [ 1376.593524][T15147] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1376.593569][T15147] __x64_sys_recvmmsg+0x198/0x250 [ 1376.593606][T15147] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1376.593649][T15147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.593675][T15147] do_syscall_64+0x15f/0xf80 [ 1376.593706][T15147] ? trace_irq_disable+0x3b/0x140 [ 1376.593733][T15147] ? clear_bhb_loop+0x40/0x90 [ 1376.593762][T15147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.593785][T15147] RIP: 0033:0x7f530bfdce59 [ 1376.593807][T15147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.593827][T15147] RSP: 002b:00007f530a236028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1376.593852][T15147] RAX: ffffffffffffffda RBX: 00007f530c255fa0 RCX: 00007f530bfdce59 [ 1376.593869][T15147] RDX: 0000000004000210 RSI: 0000200000001740 RDI: 0000000000000003 [ 1376.593885][T15147] RBP: 00007f530a236090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.593901][T15147] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1376.593915][T15147] R13: 00007f530c256038 R14: 00007f530c255fa0 R15: 00007ffd79da3458 [ 1376.593951][T15147] [ 1376.867191][T14870] ums-realtek 10-1:166.177: USB Mass Storage device detected [ 1377.029129][T14870] ums-realtek 10-1:166.34: USB Mass Storage device detected [ 1377.192824][T14870] ums-realtek 10-1:166.34: probe with driver ums-realtek failed with error -5 [ 1377.201033][T14870] uvcvideo 10-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1377.201083][T14870] uvcvideo 10-1:166.34: No valid video chain found. [ 1377.236943][T14870] usb 10-1: USB disconnect, device number 19 [ 1377.458598][T15166] IPv6: addrconf: prefix option has invalid lifetime [ 1379.730244][T15181] tmpfs: Bad value for 'mpol' [ 1383.244362][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2219'. [ 1383.281756][T15231] vlan1: entered promiscuous mode [ 1383.282083][T15231] vlan1: entered allmulticast mode [ 1383.282100][T15231] veth0_vlan: entered allmulticast mode [ 1384.178426][T14918] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1384.250036][T14918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1384.333801][T14918] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1384.470613][T15250] FAULT_INJECTION: forcing a failure. [ 1384.470613][T15250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.470652][T15250] CPU: 1 UID: 0 PID: 15250 Comm: syz.9.2223 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1384.470684][T15250] Tainted: [L]=SOFTLOCKUP [ 1384.470693][T15250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1384.470707][T15250] Call Trace: [ 1384.470716][T15250] [ 1384.470725][T15250] dump_stack_lvl+0xe8/0x150 [ 1384.470757][T15250] should_fail_ex+0x46b/0x600 [ 1384.470793][T15250] _copy_to_user+0x31/0xb0 [ 1384.470825][T15250] drm_ioctl+0x6e0/0xb80 [ 1384.470854][T15250] ? smk_tskacc+0x311/0x3a0 [ 1384.470892][T15250] ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [ 1384.470929][T15250] ? __pfx_drm_ioctl+0x10/0x10 [ 1384.470973][T15250] ? __fget_files+0x2a/0x420 [ 1384.470999][T15250] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1384.471026][T15250] ? __pfx_drm_ioctl+0x10/0x10 [ 1384.471056][T15250] __se_sys_ioctl+0xff/0x170 [ 1384.471084][T15250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.471109][T15250] do_syscall_64+0x15f/0xf80 [ 1384.471138][T15250] ? trace_irq_disable+0x3b/0x140 [ 1384.471165][T15250] ? clear_bhb_loop+0x40/0x90 [ 1384.471193][T15250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.471216][T15250] RIP: 0033:0x7feaf6bece59 [ 1384.471238][T15250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.471257][T15250] RSP: 002b:00007feaf4e1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.471280][T15250] RAX: ffffffffffffffda RBX: 00007feaf6e66090 RCX: 00007feaf6bece59 [ 1384.471296][T15250] RDX: 0000200000000080 RSI: 00000000c01064ab RDI: 0000000000000003 [ 1384.471311][T15250] RBP: 00007feaf4e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.471325][T15250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.471338][T15250] R13: 00007feaf6e66128 R14: 00007feaf6e66090 R15: 00007ffe42314508 [ 1384.471375][T15250] [ 1384.892794][T14918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1384.911693][T14918] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1385.000913][T14918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1385.002140][T14918] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1385.061767][T14918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1386.346975][T14918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.386264][T14918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.522763][T13935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.522909][T13935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.525624][T13935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.525769][T13935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.245926][T15284] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2228'. [ 1388.175102][T10242] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1388.346575][T10242] usb 10-1: Using ep0 maxpacket: 8 [ 1388.391457][T10242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1388.391497][T10242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1388.391519][T10242] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1388.391544][T10242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1388.391567][T10242] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1388.391609][T10242] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1388.391635][T10242] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.581584][T10242] usb 10-1: config 0 descriptor?? [ 1388.742511][T11290] Bluetooth: hci5: urb ffff88802559cc00 submission failed (90) [ 1389.627343][T15302] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1389.629824][T15302] /dev/nullb0: Can't open blockdev [ 1390.080083][T14870] usb 10-1: USB disconnect, device number 20 [ 1390.220031][T15312] FAULT_INJECTION: forcing a failure. [ 1390.220031][T15312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.220107][T15312] CPU: 0 UID: 0 PID: 15312 Comm: syz.8.2232 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1390.220140][T15312] Tainted: [L]=SOFTLOCKUP [ 1390.220149][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1390.220172][T15312] Call Trace: [ 1390.220182][T15312] [ 1390.220192][T15312] dump_stack_lvl+0xe8/0x150 [ 1390.220225][T15312] should_fail_ex+0x46b/0x600 [ 1390.220256][T15312] _copy_from_user+0x2d/0xb0 [ 1390.220285][T15312] ___sys_sendmsg+0x1c6/0x360 [ 1390.220317][T15312] ? __lock_acquire+0x6b5/0x2cf0 [ 1390.220354][T15312] ? __pfx____sys_sendmsg+0x10/0x10 [ 1390.220392][T15312] ? kstrtouint+0x6e/0xe0 [ 1390.220454][T15312] ? __fget_files+0x2a/0x420 [ 1390.220475][T15312] ? __fget_files+0x3a6/0x420 [ 1390.220507][T15312] __sys_sendmmsg+0x282/0x4e0 [ 1390.220545][T15312] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1390.220588][T15312] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1390.220629][T15312] ? ksys_write+0x248/0x270 [ 1390.220660][T15312] ? __pfx_ksys_write+0x10/0x10 [ 1390.220694][T15312] __x64_sys_sendmmsg+0xa0/0xc0 [ 1390.220725][T15312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.220751][T15312] do_syscall_64+0x15f/0xf80 [ 1390.220780][T15312] ? trace_irq_disable+0x3b/0x140 [ 1390.220807][T15312] ? clear_bhb_loop+0x40/0x90 [ 1390.220835][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.220858][T15312] RIP: 0033:0x7f530bfdce59 [ 1390.220880][T15312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.220900][T15312] RSP: 002b:00007f530a236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1390.220924][T15312] RAX: ffffffffffffffda RBX: 00007f530c255fa0 RCX: 00007f530bfdce59 [ 1390.220941][T15312] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 1390.220956][T15312] RBP: 00007f530a236090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.220970][T15312] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 1390.220984][T15312] R13: 00007f530c256038 R14: 00007f530c255fa0 R15: 00007ffd79da3458 [ 1390.221019][T15312] [ 1390.597357][T14918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.726630][T14918] veth0_vlan: entered promiscuous mode [ 1391.764406][T14918] veth1_vlan: entered promiscuous mode [ 1392.306134][T14918] veth0_macvtap: entered promiscuous mode [ 1392.321756][T14918] veth1_macvtap: entered promiscuous mode [ 1392.361984][T14918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1392.385834][T14918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1392.410244][T13934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.410543][T13934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.410587][T13934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.410628][T13934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.871176][ T822] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1393.049023][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 1393.070631][ T822] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1393.070687][ T822] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1393.081018][ T822] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 1393.081052][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.081074][ T822] usb 4-1: Product: syz [ 1393.081090][ T822] usb 4-1: Manufacturer: syz [ 1393.081107][ T822] usb 4-1: SerialNumber: syz [ 1393.626196][ T822] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1394.049246][ T822] usb 4-1: unit 143 not found! [ 1394.557679][ T822] usb 4-1: selecting invalid altsetting 1 [ 1394.557706][ T822] snd-usb-caiaq 4-1:1.2: can't set alt interface. [ 1394.557728][ T822] usb 4-1: unable to init card! (ret=-5) [ 1394.562618][ T822] snd-usb-caiaq 4-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 1394.579328][ T822] usb 4-1: USB disconnect, device number 61 [ 1395.122250][ T3287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.122275][ T3287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.336843][T12758] udevd[12758]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1395.715141][T13940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.715159][T13940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.231458][T15361] netlink: 'syz.8.2244': attribute type 2 has an invalid length. [ 1396.310192][T14581] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1396.460029][T14581] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.460061][T14581] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1396.460116][T14581] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1396.460144][T14581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.523105][T14581] usb 4-1: config 0 descriptor?? [ 1396.595139][T14581] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1396.595192][T14581] dvb-usb: bulk message failed: -22 (3/0) [ 1396.751484][ T1255] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1396.782323][T15356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2241'. [ 1396.910441][ T1255] usb 10-1: Using ep0 maxpacket: 8 [ 1396.918476][ T1255] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1396.939071][ T1255] usb 10-1: config 4 has an invalid interface number: 213 but max is 0 [ 1396.939205][ T1255] usb 10-1: config 4 has no interface number 0 [ 1396.939243][ T1255] usb 10-1: config 4 interface 213 has no altsetting 0 [ 1396.946607][ T1255] usb 10-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 1396.946643][ T1255] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.946667][ T1255] usb 10-1: Product: syz [ 1396.946684][ T1255] usb 10-1: Manufacturer: syz [ 1396.946701][ T1255] usb 10-1: SerialNumber: syz [ 1397.055650][T14581] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1397.074041][T14581] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1397.074107][T14581] usb 4-1: media controller created [ 1398.214536][T14581] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1398.243325][ T1255] usb 10-1: USB disconnect, device number 21 [ 1398.591665][T14581] dvb-usb: bulk message failed: -22 (6/0) [ 1398.591770][T14581] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1398.664801][T14581] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 1398.694050][T14581] dvb-usb: schedule remote query interval to 150 msecs. [ 1398.694075][T14581] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1398.845289][ T1255] dvb-usb: bulk message failed: -22 (1/0) [ 1398.845317][ T1255] dvb-usb: error while querying for an remote control event. [ 1398.982276][ T10] usb 4-1: USB disconnect, device number 62 [ 1399.318877][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 1399.521781][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1399.666644][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 1399.666666][ T36] audit: type=1326 audit(1779534109.993:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15378 comm="syz.9.2250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1399.666723][ T36] audit: type=1326 audit(1779534109.993:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15378 comm="syz.9.2250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1399.717095][ T36] audit: type=1326 audit(1779534110.045:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15378 comm="syz.9.2250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1399.717324][ T36] audit: type=1326 audit(1779534110.045:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15378 comm="syz.9.2250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1399.717471][ T36] audit: type=1326 audit(1779534110.045:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15378 comm="syz.9.2250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1399.717617][ T36] audit: type=1326 audit(1779534110.045:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15378 comm="syz.9.2250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1399.717752][ T36] audit: type=1326 audit(1779534110.045:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15378 comm="syz.9.2250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1399.717878][ T36] audit: type=1326 audit(1779534110.045:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15378 comm="syz.9.2250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1399.718501][ T36] audit: type=1326 audit(1779534110.045:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15378 comm="syz.9.2250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1399.718685][ T36] audit: type=1326 audit(1779534110.045:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15378 comm="syz.9.2250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf6bece59 code=0x7ffc0000 [ 1402.805015][T14870] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1403.087416][T15394] netlink: 'syz.9.2255': attribute type 27 has an invalid length. [ 1403.087436][T15394] netlink: 'syz.9.2255': attribute type 3 has an invalid length. [ 1403.087446][T15394] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2255'. [ 1403.235657][T15402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.236461][T15402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.382575][T14870] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1403.385219][T14870] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1403.385263][T14870] usb 10-1: can't read configurations, error -71 [ 1403.877110][T15411] FAULT_INJECTION: forcing a failure. [ 1403.877110][T15411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1403.877152][T15411] CPU: 1 UID: 0 PID: 15411 Comm: syz.3.2261 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1403.877184][T15411] Tainted: [L]=SOFTLOCKUP [ 1403.877193][T15411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1403.877208][T15411] Call Trace: [ 1403.877223][T15411] [ 1403.877233][T15411] dump_stack_lvl+0xe8/0x150 [ 1403.877272][T15411] should_fail_ex+0x46b/0x600 [ 1403.877303][T15411] prepare_alloc_pages+0x22a/0x6b0 [ 1403.877342][T15411] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1403.877377][T15411] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1403.877412][T15411] ? __pfx_policy_nodemask+0x10/0x10 [ 1403.877439][T15411] ? rcu_is_watching+0x15/0xb0 [ 1403.877473][T15411] ? trace_kmalloc+0x2a/0xf0 [ 1403.877513][T15411] alloc_pages_mpol+0xd1/0x380 [ 1403.877547][T15411] alloc_pages_noprof+0xd2/0x2f0 [ 1403.877578][T15411] af_alg_sendmsg+0x144c/0x2660 [ 1403.877604][T15411] ? __lock_acquire+0x6b5/0x2cf0 [ 1403.877654][T15411] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 1403.877682][T15411] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1403.877720][T15411] ? skcipher_sendmsg+0x26/0xf0 [ 1403.877754][T15411] ____sys_sendmsg+0x94c/0x9c0 [ 1403.877793][T15411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1403.877836][T15411] ? import_iovec+0x73/0xa0 [ 1403.877867][T15411] ___sys_sendmsg+0x2a5/0x360 [ 1403.877896][T15411] ? __lock_acquire+0x6b5/0x2cf0 [ 1403.877931][T15411] ? __pfx____sys_sendmsg+0x10/0x10 [ 1403.877968][T15411] ? kstrtouint+0x6e/0xe0 [ 1403.878030][T15411] ? __fget_files+0x2a/0x420 [ 1403.878050][T15411] ? __fget_files+0x3a6/0x420 [ 1403.878084][T15411] __sys_sendmmsg+0x282/0x4e0 [ 1403.878124][T15411] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1403.878167][T15411] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1403.878210][T15411] ? ksys_write+0x248/0x270 [ 1403.878239][T15411] ? __pfx_ksys_write+0x10/0x10 [ 1403.878275][T15411] __x64_sys_sendmmsg+0xa0/0xc0 [ 1403.878307][T15411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.878332][T15411] do_syscall_64+0x15f/0xf80 [ 1403.878361][T15411] ? trace_irq_disable+0x3b/0x140 [ 1403.878388][T15411] ? clear_bhb_loop+0x40/0x90 [ 1403.878417][T15411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.878441][T15411] RIP: 0033:0x7f9a9582ce59 [ 1403.878463][T15411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.878484][T15411] RSP: 002b:00007f9a93a7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1403.878515][T15411] RAX: ffffffffffffffda RBX: 00007f9a95aa5fa0 RCX: 00007f9a9582ce59 [ 1403.878534][T15411] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 1403.878550][T15411] RBP: 00007f9a93a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.878565][T15411] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 1403.878580][T15411] R13: 00007f9a95aa6038 R14: 00007f9a95aa5fa0 R15: 00007fff7b423768 [ 1403.878619][T15411] [ 1406.370484][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 1406.370509][ T36] audit: type=1326 audit(1779534116.512:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15417 comm="syz.6.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83218ce59 code=0x7ffc0000 [ 1406.370565][ T36] audit: type=1326 audit(1779534116.512:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15417 comm="syz.6.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83218ce59 code=0x7ffc0000 [ 1406.370614][ T36] audit: type=1326 audit(1779534116.617:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15417 comm="syz.6.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83218ce59 code=0x7ffc0000 [ 1406.370664][ T36] audit: type=1326 audit(1779534116.617:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15417 comm="syz.6.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83218ce59 code=0x7ffc0000 [ 1406.370716][ T36] audit: type=1326 audit(1779534116.617:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15417 comm="syz.6.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd83218ce59 code=0x7ffc0000 [ 1406.370785][ T36] audit: type=1326 audit(1779534116.617:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15417 comm="syz.6.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83218ce59 code=0x7ffc0000 [ 1406.370835][ T36] audit: type=1326 audit(1779534116.617:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15417 comm="syz.6.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83218ce59 code=0x7ffc0000 [ 1406.370887][ T36] audit: type=1326 audit(1779534116.617:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15417 comm="syz.6.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83218ce59 code=0x7ffc0000 [ 1406.370939][ T36] audit: type=1326 audit(1779534116.617:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15417 comm="syz.6.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd83218ce59 code=0x7ffc0000 [ 1406.370992][ T36] audit: type=1326 audit(1779534116.617:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15417 comm="syz.6.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83218ce59 code=0x7ffc0000 [ 1406.932801][T14581] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1407.269841][T14581] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1407.269875][T14581] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.269891][T14581] usb 10-1: Product: 풘墪速㓼矈ﻻﯦ␐寯ᇆ㎚繶등さ틢뱋퇿헱၈ [ 1407.269905][T14581] usb 10-1: Manufacturer: 䙔㩘똌憇銲쪳鸌ୠ茑瞩윷鿞≯㬭䨹兢䚉䎔倝㖍ᴈ⯳蝖樹׬ổ릌ឲᴾ瘍㛈෪ [ 1407.281323][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 1407.281437][T15423] bond0: option arp_all_targets: invalid value (18446744071991780800) [ 1407.598555][T14581] usb 10-1: unit 2 not found! [ 1407.598575][T14581] usb 10-1: unit 1: unexpected type 0x0c [ 1407.781396][T15415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.782093][T15415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.334790][T14581] usb 10-1: USB disconnect, device number 24 [ 1408.805299][T12239] udevd[12239]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1410.645336][T15458] binder: 15454:15458 ioctl 4018620d 0 returned -22 [ 1412.103371][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 1412.103394][ T36] audit: type=1326 audit(1779534122.853:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15461 comm="syz.3.2276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1412.103453][ T36] audit: type=1326 audit(1779534122.853:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15461 comm="syz.3.2276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1412.103505][ T36] audit: type=1326 audit(1779534122.958:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15461 comm="syz.3.2276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1412.103556][ T36] audit: type=1326 audit(1779534122.958:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15461 comm="syz.3.2276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1412.103607][ T36] audit: type=1326 audit(1779534122.958:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15461 comm="syz.3.2276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1412.103658][ T36] audit: type=1326 audit(1779534122.958:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15461 comm="syz.3.2276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1412.103709][ T36] audit: type=1326 audit(1779534122.958:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15461 comm="syz.3.2276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1412.103768][ T36] audit: type=1326 audit(1779534122.958:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15461 comm="syz.3.2276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1412.103819][ T36] audit: type=1326 audit(1779534122.958:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15461 comm="syz.3.2276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1412.103871][ T36] audit: type=1326 audit(1779534122.958:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15461 comm="syz.3.2276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1412.928665][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2278'. [ 1415.904136][T14581] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1416.125741][T14581] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1416.125765][T14581] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1416.128433][T14581] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1416.128456][T14581] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.128471][T14581] usb 7-1: Product: syz [ 1416.128490][T14581] usb 7-1: Manufacturer: syz [ 1416.128502][T14581] usb 7-1: SerialNumber: syz [ 1416.204641][T14581] usb 7-1: config 0 descriptor?? [ 1416.224942][T14581] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1416.343946][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1416.344027][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1416.704451][T14581] gspca_sunplus: reg_r err -110 [ 1416.704617][T14581] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1418.582102][ T10] usb 7-1: USB disconnect, device number 53 [ 1418.631207][T15493] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2286'. [ 1418.631250][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 1419.039526][T15493] bond0: entered promiscuous mode [ 1419.039551][T15493] bond_slave_0: entered promiscuous mode [ 1419.039798][T15493] bond_slave_1: entered promiscuous mode [ 1419.042026][T15493] batadv_slave_0: entered promiscuous mode [ 1419.042272][T15493] batadv_slave_0: left promiscuous mode [ 1419.185122][T15493] bond0: left promiscuous mode [ 1419.185152][T15493] bond_slave_0: left promiscuous mode [ 1419.185432][T15493] bond_slave_1: left promiscuous mode [ 1421.998342][T15511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1422.020656][T15511] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2290'. [ 1422.804561][T13100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.192069][ T5732] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1425.625372][ T5732] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1425.625405][ T5732] usb 9-1: config 0 has no interface number 0 [ 1425.625458][ T5732] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1425.631846][ T5732] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1425.631882][ T5732] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.631949][ T5732] usb 9-1: Product: syz [ 1425.632012][ T5732] usb 9-1: Manufacturer: syz [ 1425.632072][ T5732] usb 9-1: SerialNumber: syz [ 1425.681050][ T5732] usb 9-1: config 0 descriptor?? [ 1425.841318][T13100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.995995][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1428.057776][T15550] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2299'. [ 1428.057815][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2299'. [ 1428.114313][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1428.128371][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1428.132100][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1428.225345][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1429.006436][T13100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.533854][ T5732] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1429.534176][ T5732] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1429.660375][ T5732] usb 9-1: USB disconnect, device number 25 [ 1429.667230][T15556] netlink: 424 bytes leftover after parsing attributes in process `syz.3.2300'. [ 1430.521114][T11290] Bluetooth: hci1: command tx timeout [ 1430.547996][T13100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.049765][T15582] lo speed is unknown, defaulting to 1000 [ 1431.402268][ T5732] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1431.593015][ T5732] usb 4-1: device descriptor read/64, error -71 [ 1431.821364][ T5732] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1431.907491][T15546] lo speed is unknown, defaulting to 1000 [ 1431.945288][ T5732] usb 4-1: device descriptor read/64, error -71 [ 1432.051245][ T5732] usb usb4-port1: attempt power cycle [ 1432.247981][T15591] ipvlan2: entered allmulticast mode [ 1432.248006][T15591] batadv0: entered allmulticast mode [ 1432.285174][T15591] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1432.412281][ T5732] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1432.437431][ T5732] usb 4-1: device descriptor read/8, error -71 [ 1432.490395][T11290] Bluetooth: hci1: command tx timeout [ 1432.700018][ T5732] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1432.726495][ T5732] usb 4-1: device descriptor read/8, error -71 [ 1432.832311][ T5732] usb usb4-port1: unable to enumerate USB device [ 1434.470607][T11290] Bluetooth: hci1: command tx timeout [ 1436.530182][T11290] Bluetooth: hci1: command tx timeout [ 1436.916739][T15619] netlink: 204 bytes leftover after parsing attributes in process `syz.9.2312'. [ 1436.916782][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2312'. [ 1437.061669][T13100] bridge_slave_1: left allmulticast mode [ 1437.061710][T13100] bridge_slave_1: left promiscuous mode [ 1437.061996][T13100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.199821][T13100] bridge_slave_0: left allmulticast mode [ 1437.199861][T13100] bridge_slave_0: left promiscuous mode [ 1437.200157][T13100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.931452][T15646] program syz.6.2317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1441.684888][T13100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.730464][T13100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.760284][T13100] bond0 (unregistering): Released all slaves [ 1441.818838][T15652] lo speed is unknown, defaulting to 1000 [ 1441.923307][T15619] bond0: entered promiscuous mode [ 1441.943673][T15619] batadv_slave_0: entered promiscuous mode [ 1441.944731][T15619] debugfs: 'hsr1' already exists in 'hsr' [ 1441.944759][T15619] Cannot create hsr debugfs directory [ 1441.950764][T14581] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1442.039685][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1442.089948][T14581] usb 9-1: device descriptor read/64, error -71 [ 1442.215626][T15646] lo speed is unknown, defaulting to 1000 [ 1442.355857][T14581] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1442.464923][T15546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.465161][T15546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.465399][T15546] bridge_slave_0: entered allmulticast mode [ 1442.468567][T15546] bridge_slave_0: entered promiscuous mode [ 1442.480568][T14581] usb 9-1: device descriptor read/64, error -71 [ 1442.513087][T15546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.513312][T15546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.513552][T15546] bridge_slave_1: entered allmulticast mode [ 1442.516782][T15546] bridge_slave_1: entered promiscuous mode [ 1442.585910][T14581] usb usb9-port1: attempt power cycle [ 1442.806769][T15668] binder: Binderfs stats mode cannot be changed during a remount [ 1442.900201][ T5732] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1442.909776][T14581] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1442.929091][T14581] usb 9-1: device descriptor read/8, error -71 [ 1443.042608][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 1443.046140][ T5732] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1443.047427][ T5732] usb 4-1: config 1 has an invalid interface number: 129 but max is 0 [ 1443.047460][ T5732] usb 4-1: config 1 has no interface number 0 [ 1443.047493][ T5732] usb 4-1: config 1 interface 129 altsetting 9 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 1443.047515][ T5732] usb 4-1: config 1 interface 129 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 8 [ 1443.047533][ T5732] usb 4-1: config 1 interface 129 has no altsetting 0 [ 1443.050067][ T5732] usb 4-1: New USB device found, idVendor=06e0, idProduct=f115, bcdDevice=f9.56 [ 1443.050102][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.050118][ T5732] usb 4-1: Product: syz [ 1443.050129][ T5732] usb 4-1: Manufacturer: syz [ 1443.050140][ T5732] usb 4-1: SerialNumber: syz [ 1443.144460][T15670] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1443.156848][T14581] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1443.192860][T14581] usb 9-1: device descriptor read/8, error -71 [ 1443.291094][T14581] usb usb9-port1: unable to enumerate USB device [ 1444.589332][ T5732] ti_usb_3410_5052 4-1:1.129: TI USB 3410 1 port adapter converter detected [ 1444.713612][ T5732] usb 4-1: USB disconnect, device number 67 [ 1445.004970][T15546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.031226][T15546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.895602][T15546] team0: Port device team_slave_0 added [ 1447.637681][T15709] sctp: [Deprecated]: syz.3.2328 (pid 15709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1447.637681][T15709] Use struct sctp_sack_info instead [ 1447.638366][T15709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1447.776535][T15546] team0: Port device team_slave_1 added [ 1447.802369][T15713] tap0: tun_chr_ioctl cmd 1074025681 [ 1448.642087][T15546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.642108][T15546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.642143][T15546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.008911][T13100] hsr_slave_0: left promiscuous mode [ 1449.054828][T13100] hsr_slave_1: left promiscuous mode [ 1449.055765][T13100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1449.055787][T13100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.182915][T13100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1449.182946][T13100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.727789][T13100] veth1_macvtap: left promiscuous mode [ 1449.727901][T13100] veth0_macvtap: left promiscuous mode [ 1449.728159][T13100] veth1_vlan: left promiscuous mode [ 1449.728335][T13100] veth0_vlan: left promiscuous mode [ 1449.836179][T15732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1449.856949][T15732] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2330'. [ 1452.526775][ T5730] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1452.698756][ T5730] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1452.698798][ T5730] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1452.698918][ T5730] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1452.698946][ T5730] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.748692][T15734] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1452.768654][ T5730] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1452.971205][T13100] team0 (unregistering): Port device team_slave_1 removed [ 1453.184243][T13100] team0 (unregistering): Port device team_slave_0 removed [ 1453.929012][T15546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.929095][T15546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.929129][T15546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.998693][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1454.171001][T15546] hsr_slave_0: entered promiscuous mode [ 1454.172539][T15546] hsr_slave_1: entered promiscuous mode [ 1454.173596][T15546] debugfs: 'hsr0' already exists in 'hsr' [ 1454.173634][T15546] Cannot create hsr debugfs directory [ 1454.585873][ T5732] usb 10-1: USB disconnect, device number 25 [ 1455.121287][T14581] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1455.283034][T14581] usb 4-1: Using ep0 maxpacket: 16 [ 1455.289540][T14581] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.289577][T14581] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1455.289612][T14581] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1455.289638][T14581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.418881][T14581] usb 4-1: config 0 descriptor?? [ 1458.267917][T14581] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1459.129053][T15764] lo speed is unknown, defaulting to 1000 [ 1459.454084][T14870] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1459.605215][T14870] usb 9-1: device descriptor read/64, error -71 [ 1459.698631][ T822] usb 4-1: USB disconnect, device number 68 [ 1459.845795][T14870] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1459.969855][T14870] usb 9-1: device descriptor read/64, error -71 [ 1460.074838][T14870] usb usb9-port1: attempt power cycle [ 1460.421461][T14870] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1460.451840][T14870] usb 9-1: device descriptor read/8, error -71 [ 1460.512894][ T822] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1460.726082][T14870] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1460.756727][ T822] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.756829][ T822] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1460.756860][ T822] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1460.756908][ T822] usb 10-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1460.756933][ T822] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.760907][T14870] usb 9-1: device descriptor read/8, error -71 [ 1460.908920][ T822] usb 10-1: config 0 descriptor?? [ 1460.913040][T14870] usb usb9-port1: unable to enumerate USB device [ 1462.986386][T15546] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.641076][T15794] uprobe: syz.3.2341:15794 failed to unregister, leaking uprobe [ 1463.849735][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1463.921568][ T31] usb 10-1: USB disconnect, device number 26 [ 1464.596996][T15546] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.670293][T15806] IPv6: addrconf: prefix option has invalid lifetime [ 1468.662152][T15546] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.186456][ T5261] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1469.579750][T15546] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.962040][T14581] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1470.180786][T14581] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1470.180961][T14581] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.180986][T14581] usb 7-1: Product: 풘墪速㓼矈ﻻﯦ␐寯ᇆ㎚繶등さ틢뱋퇿헱၈ [ 1470.181006][T14581] usb 7-1: Manufacturer: 䙔㩘똌憇銲쪳鸌ୠ茑瞩윷鿞≯㬭䨹兢䚉䎔倝㖍ᴈ⯳蝖樹׬ổ릌ឲᴾ瘍㛈෪ [ 1470.181027][T14581] usb 7-1: SerialNumber: 㭋쫎Ⓤ蚞帵媓⏱槀騚냆赝滍埅纄沭㧆虉欝ꛄﴊⅡ䙗᷿ᛑ뼩磌몵ᡑ嫃ﱊ늞꥕⣁賅書貒昧鄷䁽猴忘䡥ꢯ [ 1470.692555][T15840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.693211][T15840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.800642][T15850] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1471.070016][T14581] usb 7-1: USB disconnect, device number 54 [ 1472.290623][T15871] 9pnet: p9_errstr2errno: server reported unknown error  [ 1475.103981][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1475.104058][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1475.619899][T15546] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1475.688398][T15546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1475.696837][T15546] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1475.806484][T15546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1475.809150][T15546] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1475.861141][T15546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1475.862839][T15546] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1475.936077][T15546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1476.502492][T15546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.634076][T15546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.675276][T13931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.675514][T13931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.711214][T13935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.711324][T13935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1477.015264][T15915] 9pnet: p9_errstr2errno: server reported unknown error [ 1479.080511][ T5711] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1479.128375][T15546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.254732][ T5711] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1479.271405][ T5711] usb 9-1: not running at top speed; connect to a high speed hub [ 1479.272949][ T5711] usb 9-1: config index 0 descriptor too short (expected 759, got 247) [ 1479.272977][ T5711] usb 9-1: config 7 has an invalid interface number: 17 but max is 0 [ 1479.273000][ T5711] usb 9-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 1479.273021][ T5711] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.273044][ T5711] usb 9-1: config 7 has no interface number 0 [ 1479.273095][ T5711] usb 9-1: config 7 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1479.273120][ T5711] usb 9-1: config 7 interface 17 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1479.273151][ T5711] usb 9-1: config 7 interface 17 altsetting 2 has an invalid endpoint descriptor of length 5, skipping [ 1479.273177][ T5711] usb 9-1: config 7 interface 17 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1479.273207][ T5711] usb 9-1: config 7 interface 17 has no altsetting 0 [ 1479.285312][ T5711] usb 9-1: New USB device found, idVendor=04e6, idProduct=430f, bcdDevice=4d.fa [ 1479.285349][ T5711] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.285386][ T5711] usb 9-1: Product: syz [ 1479.285403][ T5711] usb 9-1: Manufacturer: syz [ 1479.285418][ T5711] usb 9-1: SerialNumber: syz [ 1479.446418][T15546] veth0_vlan: entered promiscuous mode [ 1479.527551][T15546] veth1_vlan: entered promiscuous mode [ 1479.793662][T15949] netlink: 'syz.6.2375': attribute type 13 has an invalid length. [ 1479.860729][T15546] veth0_macvtap: entered promiscuous mode [ 1479.896389][T15546] veth1_macvtap: entered promiscuous mode [ 1479.967458][ T5711] usb 9-1: USB disconnect, device number 34 [ 1480.055215][T15546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1480.112304][T15546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.153309][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.208692][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.226595][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.226889][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.254690][T15957] 9pnet: p9_errstr2errno: server reported unknown error [ 1483.963056][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1484.026241][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1484.048573][T15983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1484.101961][T15983] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1484.103829][T15983] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1484.698279][T14870] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1484.845122][T14870] usb 7-1: Using ep0 maxpacket: 16 [ 1484.873893][T14870] usb 7-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 1484.873932][T14870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.873957][T14870] usb 7-1: Product: syz [ 1484.873975][T14870] usb 7-1: Manufacturer: syz [ 1484.873993][T14870] usb 7-1: SerialNumber: syz [ 1485.421628][T15986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.424564][T15986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.580524][T14870] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1485.634863][T14870] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 1485.634902][T14870] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1485.662451][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 1485.950349][T14870] usb 7-1: USB disconnect, device number 55 [ 1486.290118][T15983] Bluetooth: hci5: command tx timeout [ 1487.203503][ T822] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1487.444589][ T822] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1487.444624][ T822] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1487.449244][ T822] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1487.449278][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.449300][ T822] usb 4-1: Product: syz [ 1487.449316][ T822] usb 4-1: Manufacturer: syz [ 1487.449333][ T822] usb 4-1: SerialNumber: syz [ 1487.512454][ T822] usb 4-1: config 0 descriptor?? [ 1487.573156][ T822] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1487.885733][T13931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.169831][T16042] loop5: detected capacity change from 0 to 7 [ 1488.279663][T15983] Bluetooth: hci5: command tx timeout [ 1488.284658][T16045] ubi31: attaching mtd0 [ 1488.353867][T15977] lo speed is unknown, defaulting to 1000 [ 1488.362213][T16042] Dev loop5: unable to read RDB block 7 [ 1488.362269][T16042] loop5: unable to read partition table [ 1488.362508][T16042] loop5: partition table beyond EOD, truncated [ 1488.363125][T16042] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1488.742270][T16045] ubi31: scanning is finished [ 1488.742294][T16045] ubi31: empty MTD device detected [ 1489.775588][T13931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.251842][T15983] Bluetooth: hci5: command tx timeout [ 1490.802908][ T10] usb 4-1: USB disconnect, device number 69 [ 1491.350075][T16045] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1491.384985][T13931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.465890][T15983] Bluetooth: hci5: command tx timeout [ 1494.905678][T13931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.940574][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2397'. [ 1494.971522][T16090] lo speed is unknown, defaulting to 1000 [ 1495.644283][ T823] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1495.799905][ T823] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1495.799968][ T823] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1495.799995][ T823] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1495.802706][ T823] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1495.802739][ T823] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1495.802762][ T823] usb 9-1: Product: syz [ 1495.802778][ T823] usb 9-1: Manufacturer: syz [ 1495.802794][ T823] usb 9-1: SerialNumber: syz [ 1495.851792][ T823] usb 9-1: config 0 descriptor?? [ 1495.896201][ T823] hub 9-1:0.0: bad descriptor, ignoring hub [ 1495.896242][ T823] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1495.979251][ T823] usb 9-1: selecting invalid altsetting 0 [ 1496.020857][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.020956][T15977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.063432][T15977] bridge_slave_0: entered allmulticast mode [ 1496.069678][T15977] bridge_slave_0: entered promiscuous mode [ 1496.096972][T15977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.097159][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.097405][T15977] bridge_slave_1: entered allmulticast mode [ 1496.131414][T15977] bridge_slave_1: entered promiscuous mode [ 1496.500969][T15977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.545251][T15977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1497.423529][ T823] usb 9-1: USB disconnect, device number 35 [ 1497.566912][T15977] team0: Port device team_slave_0 added [ 1497.973090][T15977] team0: Port device team_slave_1 added [ 1498.080170][T16132] udevd[16132]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1498.231458][T15977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.231478][T15977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.231508][T15977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.318983][T15977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.319003][T15977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.319035][T15977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.450710][T16135] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2406'. [ 1500.576757][T13931] bridge_slave_1: left allmulticast mode [ 1500.576796][T13931] bridge_slave_1: left promiscuous mode [ 1500.645277][T13931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.792745][T13931] bridge_slave_0: left allmulticast mode [ 1500.792785][T13931] bridge_slave_0: left promiscuous mode [ 1500.793050][T13931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.910829][ T5711] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1501.076958][ T5711] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1501.092084][ T5711] usb 10-1: string descriptor 0 read error: -22 [ 1501.092370][ T5711] usb 10-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.40 [ 1501.092399][ T5711] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.541297][T16156] futex_wake_op: OJN\g tries to shift op by 144; fix this program [ 1501.994237][T16161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.026637][T16161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.773780][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 1502.773804][ T36] audit: type=1326 audit(1779534218.227:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.3.2409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1502.909732][ T36] audit: type=1326 audit(1779534218.237:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.3.2409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1502.910773][ T36] audit: type=1326 audit(1779534218.363:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.3.2409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1502.984914][ T36] audit: type=1326 audit(1779534218.374:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.3.2409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1503.020909][ T36] audit: type=1326 audit(1779534218.458:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.3.2409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1503.124078][ T36] audit: type=1326 audit(1779534218.594:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.3.2409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1503.124148][ T36] audit: type=1326 audit(1779534218.563:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.3.2409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1503.127930][ T36] audit: type=1326 audit(1779534218.605:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.3.2409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1503.128004][ T36] audit: type=1326 audit(1779534218.605:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.3.2409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1503.187545][ T36] audit: type=1326 audit(1779534218.605:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.3.2409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9582ce59 code=0x7ffc0000 [ 1503.731199][T16165] ================================================================== [ 1503.731221][T16165] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 1503.731260][T16165] Read of size 1 at addr ffff888058630418 by task syz.6.2414/16165 [ 1503.731287][T16165] [ 1503.731300][T16165] CPU: 0 UID: 0 PID: 16165 Comm: syz.6.2414 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1503.731324][T16165] Tainted: [L]=SOFTLOCKUP [ 1503.731352][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1503.731367][T16165] Call Trace: [ 1503.731377][T16165] [ 1503.731387][T16165] dump_stack_lvl+0xe8/0x150 [ 1503.731416][T16165] print_address_description+0x55/0x1e0 [ 1503.731442][T16165] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1503.731480][T16165] print_report+0x58/0x70 [ 1503.731496][T16165] kasan_report+0x117/0x150 [ 1503.731539][T16165] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1503.731574][T16165] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1503.731599][T16165] __kasan_check_byte+0x2a/0x40 [ 1503.731623][T16165] lock_acquire+0x84/0x350 [ 1503.731657][T16165] ? preempt_schedule_thunk+0x16/0x30 [ 1503.731683][T16165] ? rcu_is_watching+0x15/0xb0 [ 1503.731729][T16165] _raw_spin_lock_irqsave+0x40/0x60 [ 1503.731767][T16165] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1503.731791][T16165] rt_mutex_slowunlock+0xbf/0x8b0 [ 1503.731814][T16165] ? reacquire_held_locks+0x104/0x190 [ 1503.731848][T16165] ? rt_spin_lock+0x1e0/0x400 [ 1503.731874][T16165] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1503.731901][T16165] ? rt_spin_unlock+0x14f/0x200 [ 1503.731926][T16165] ? rt_spin_unlock+0x160/0x200 [ 1503.731951][T16165] kbd_event+0x2f91/0x42f0 [ 1503.731991][T16165] ? __pfx_kbd_event+0x10/0x10 [ 1503.732021][T16165] ? try_to_take_rt_mutex+0x840/0xb00 [ 1503.732054][T16165] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1503.732086][T16165] ? __lock_acquire+0x6b5/0x2cf0 [ 1503.732135][T16165] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1503.732163][T16165] ? input_pass_values+0x8d/0x890 [ 1503.732216][T16165] input_handle_events_default+0xd4/0x1a0 [ 1503.732244][T16165] ? input_pass_values+0x8d/0x890 [ 1503.732277][T16165] input_pass_values+0x288/0x890 [ 1503.732314][T16165] ? input_handle_event+0x70c/0xf30 [ 1503.732344][T16165] input_event_dispose+0x330/0x6b0 [ 1503.732366][T16165] input_inject_event+0x1d7/0x320 [ 1503.732410][T16165] ? input_inject_event+0xb0/0x320 [ 1503.732445][T16165] evdev_write+0x328/0x4c0 [ 1503.732466][T16165] ? __lock_acquire+0x6b5/0x2cf0 [ 1503.732496][T16165] ? __pfx_evdev_write+0x10/0x10 [ 1503.732521][T16165] ? rw_verify_area+0x25b/0x4e0 [ 1503.732539][T16165] ? __pfx_evdev_write+0x10/0x10 [ 1503.732572][T16165] vfs_write+0x2a3/0xba0 [ 1503.732601][T16165] ? __pfx_vfs_write+0x10/0x10 [ 1503.732628][T16165] ? __fget_files+0x2a/0x420 [ 1503.732650][T16165] ? __fget_files+0x2a/0x420 [ 1503.732669][T16165] ? __fget_files+0x3a6/0x420 [ 1503.732687][T16165] ? __fget_files+0x2a/0x420 [ 1503.732714][T16165] ksys_write+0x156/0x270 [ 1503.732733][T16165] ? __pfx_ksys_write+0x10/0x10 [ 1503.732785][T16165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.732811][T16165] do_syscall_64+0x15f/0xf80 [ 1503.732842][T16165] ? clear_bhb_loop+0x40/0x90 [ 1503.732867][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.732892][T16165] RIP: 0033:0x7fd83218ce59 [ 1503.732907][T16165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.732938][T16165] RSP: 002b:00007fd8303c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1503.732964][T16165] RAX: ffffffffffffffda RBX: 00007fd832406090 RCX: 00007fd83218ce59 [ 1503.732983][T16165] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 000000000000000b [ 1503.732998][T16165] RBP: 00007fd832222d6f R08: 0000000000000000 R09: 0000000000000000 [ 1503.733014][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1503.733029][T16165] R13: 00007fd832406128 R14: 00007fd832406090 R15: 00007ffd2307d768 [ 1503.733057][T16165] [ 1503.733072][T16165] [ 1503.733085][T16165] Allocated by task 16165: [ 1503.733094][T16165] kasan_save_track+0x3e/0x80 [ 1503.733129][T16165] __kasan_kmalloc+0x93/0xb0 [ 1503.733152][T16165] __kmalloc_cache_noprof+0x3a6/0x690 [ 1503.733178][T16165] alloc_tty_struct+0xa6/0x7b0 [ 1503.733202][T16165] tty_init_dev+0x59/0x4d0 [ 1503.733224][T16165] tty_open+0x86e/0xd80 [ 1503.733254][T16165] chrdev_open+0x4d0/0x5f0 [ 1503.733273][T16165] do_dentry_open+0x83d/0x13e0 [ 1503.733315][T16165] vfs_open+0x3b/0x350 [ 1503.733343][T16165] path_openat+0x2e43/0x38a0 [ 1503.733366][T16165] do_file_open+0x23e/0x4a0 [ 1503.733387][T16165] do_sys_openat2+0x113/0x200 [ 1503.733421][T16165] __x64_sys_openat+0x138/0x170 [ 1503.733444][T16165] do_syscall_64+0x15f/0xf80 [ 1503.733480][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.733502][T16165] [ 1503.733508][T16165] Freed by task 823: [ 1503.733520][T16165] kasan_save_track+0x3e/0x80 [ 1503.733539][T16165] kasan_save_free_info+0x46/0x50 [ 1503.733567][T16165] __kasan_slab_free+0x5c/0x80 [ 1503.733587][T16165] kfree+0x1c5/0x6c0 [ 1503.733607][T16165] process_scheduled_works+0xb5d/0x1860 [ 1503.733622][T16165] worker_thread+0xa53/0xfc0 [ 1503.733638][T16165] kthread+0x388/0x470 [ 1503.733679][T16165] ret_from_fork+0x514/0xb70 [ 1503.733701][T16165] ret_from_fork_asm+0x1a/0x30 [ 1503.733727][T16165] [ 1503.733733][T16165] Last potentially related work creation: [ 1503.733747][T16165] kasan_save_stack+0x3e/0x60 [ 1503.733765][T16165] kasan_record_aux_stack+0xbd/0xd0 [ 1503.733793][T16165] insert_work+0x3d/0x330 [ 1503.733806][T16165] __queue_work+0xd1d/0x1090 [ 1503.733840][T16165] queue_work_on+0x106/0x1d0 [ 1503.733864][T16165] tty_release_struct+0xb8/0xd0 [ 1503.733890][T16165] tty_release+0xcb6/0x1710 [ 1503.733912][T16165] __fput+0x461/0xa70 [ 1503.733941][T16165] task_work_run+0x1d9/0x270 [ 1503.733971][T16165] exit_to_user_mode_loop+0xf3/0x4d0 [ 1503.733991][T16165] do_syscall_64+0x33e/0xf80 [ 1503.734031][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.734053][T16165] [ 1503.734059][T16165] The buggy address belongs to the object at ffff888058630000 [ 1503.734059][T16165] which belongs to the cache kmalloc-cg-2k of size 2048 [ 1503.734080][T16165] The buggy address is located 1048 bytes inside of [ 1503.734080][T16165] freed 2048-byte region [ffff888058630000, ffff888058630800) [ 1503.734103][T16165] [ 1503.734109][T16165] The buggy address belongs to the physical page: [ 1503.734121][T16165] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058632000 pfn:0x58630 [ 1503.734146][T16165] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1503.734158][T16165] memcg:ffff888058630811 [ 1503.734166][T16165] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1503.734198][T16165] page_type: f5(slab) [ 1503.734219][T16165] raw: 0080000000000240 ffff88801a0293c0 ffffea000257ee10 ffffea00018b4a10 [ 1503.734241][T16165] raw: ffff888058632000 0000100000080007 00000000f5000000 ffff888058630811 [ 1503.734262][T16165] head: 0080000000000240 ffff88801a0293c0 ffffea000257ee10 ffffea00018b4a10 [ 1503.734282][T16165] head: ffff888058632000 0000100000080007 00000000f5000000 ffff888058630811 [ 1503.734301][T16165] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1503.734322][T16165] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1503.734331][T16165] page dumped because: kasan: bad access detected [ 1503.734339][T16165] page_owner tracks the page as allocated [ 1503.734345][T16165] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9105, tgid 9105 (syz-executor), ts 656518097827, free_ts 623017676585 [ 1503.734398][T16165] post_alloc_hook+0x22d/0x280 [ 1503.734421][T16165] get_page_from_freelist+0x27c8/0x2840 [ 1503.734448][T16165] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1503.734474][T16165] allocate_slab+0x77/0x660 [ 1503.734504][T16165] refill_objects+0x33c/0x3d0 [ 1503.734524][T16165] __pcs_replace_empty_main+0x373/0x720 [ 1503.734568][T16165] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 1503.734592][T16165] kmemdup_noprof+0x2b/0x70 [ 1503.734624][T16165] neigh_sysctl_register+0xae/0xa90 [ 1503.734650][T16165] devinet_sysctl_register+0xad/0x200 [ 1503.734673][T16165] inetdev_init+0x2a4/0x4e0 [ 1503.734695][T16165] inetdev_event+0x30d/0x1610 [ 1503.734713][T16165] notifier_call_chain+0x1ad/0x3d0 [ 1503.734758][T16165] register_netdevice+0x18d5/0x1ed0 [ 1503.734789][T16165] veth_newlink+0x67b/0xb70 [ 1503.734809][T16165] rtnl_newlink_create+0x329/0xb70 [ 1503.734834][T16165] page last free pid 823 tgid 823 stack trace: [ 1503.734847][T16165] __free_frozen_pages+0xfa6/0x10f0 [ 1503.734872][T16165] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 1503.734896][T16165] __apply_to_page_range+0xbdc/0x1420 [ 1503.734929][T16165] __kasan_release_vmalloc+0xa2/0xd0 [ 1503.734964][T16165] purge_vmap_node+0x220/0x960 [ 1503.734989][T16165] __purge_vmap_area_lazy+0x779/0xb40 [ 1503.735075][T16165] drain_vmap_area_work+0x27/0x40 [ 1503.735132][T16165] process_scheduled_works+0xb5d/0x1860 [ 1503.735154][T16165] worker_thread+0xa53/0xfc0 [ 1503.735176][T16165] kthread+0x388/0x470 [ 1503.735202][T16165] ret_from_fork+0x514/0xb70 [ 1503.735224][T16165] ret_from_fork_asm+0x1a/0x30 [ 1503.735260][T16165] [ 1503.735266][T16165] Memory state around the buggy address: [ 1503.735278][T16165] ffff888058630300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1503.735298][T16165] ffff888058630380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1503.735310][T16165] >ffff888058630400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1503.735319][T16165] ^ [ 1503.735348][T16165] ffff888058630480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1503.735364][T16165] ffff888058630500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1503.735377][T16165] ================================================================== [ 1503.735396][T16165] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1503.735418][T16165] CPU: 0 UID: 0 PID: 16165 Comm: syz.6.2414 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1503.735449][T16165] Tainted: [L]=SOFTLOCKUP [ 1503.735458][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1503.735480][T16165] Call Trace: [ 1503.735489][T16165] [ 1503.735497][T16165] vpanic+0x56c/0xa60 [ 1503.735538][T16165] ? __pfx_vpanic+0x10/0x10 [ 1503.735572][T16165] panic+0xc5/0xd0 [ 1503.735600][T16165] ? __pfx_panic+0x10/0x10 [ 1503.735628][T16165] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1503.735718][T16165] ? rcu_is_watching+0x15/0xb0 [ 1503.735762][T16165] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1503.735795][T16165] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1503.735822][T16165] check_panic_on_warn+0x89/0xb0 [ 1503.735862][T16165] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1503.735885][T16165] end_report+0x73/0x170 [ 1503.735927][T16165] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1503.735957][T16165] kasan_report+0x128/0x150 [ 1503.735987][T16165] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1503.736021][T16165] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1503.736045][T16165] __kasan_check_byte+0x2a/0x40 [ 1503.736073][T16165] lock_acquire+0x84/0x350 [ 1503.736096][T16165] ? preempt_schedule_thunk+0x16/0x30 [ 1503.736146][T16165] ? rcu_is_watching+0x15/0xb0 [ 1503.736182][T16165] _raw_spin_lock_irqsave+0x40/0x60 [ 1503.736224][T16165] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1503.736252][T16165] rt_mutex_slowunlock+0xbf/0x8b0 [ 1503.736269][T16165] ? reacquire_held_locks+0x104/0x190 [ 1503.736316][T16165] ? rt_spin_lock+0x1e0/0x400 [ 1503.736342][T16165] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1503.736376][T16165] ? rt_spin_unlock+0x14f/0x200 [ 1503.736402][T16165] ? rt_spin_unlock+0x160/0x200 [ 1503.736426][T16165] kbd_event+0x2f91/0x42f0 [ 1503.736461][T16165] ? __pfx_kbd_event+0x10/0x10 [ 1503.736506][T16165] ? try_to_take_rt_mutex+0x840/0xb00 [ 1503.736538][T16165] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1503.736568][T16165] ? __lock_acquire+0x6b5/0x2cf0 [ 1503.736603][T16165] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1503.736632][T16165] ? input_pass_values+0x8d/0x890 [ 1503.736683][T16165] input_handle_events_default+0xd4/0x1a0 [ 1503.736712][T16165] ? input_pass_values+0x8d/0x890 [ 1503.736745][T16165] input_pass_values+0x288/0x890 [ 1503.736787][T16165] ? input_handle_event+0x70c/0xf30 [ 1503.736843][T16165] input_event_dispose+0x330/0x6b0 [ 1503.736875][T16165] input_inject_event+0x1d7/0x320 [ 1503.736905][T16165] ? input_inject_event+0xb0/0x320 [ 1503.736934][T16165] evdev_write+0x328/0x4c0 [ 1503.736955][T16165] ? __lock_acquire+0x6b5/0x2cf0 [ 1503.736988][T16165] ? __pfx_evdev_write+0x10/0x10 [ 1503.737006][T16165] ? rw_verify_area+0x25b/0x4e0 [ 1503.737044][T16165] ? __pfx_evdev_write+0x10/0x10 [ 1503.737066][T16165] vfs_write+0x2a3/0xba0 [ 1503.737097][T16165] ? __pfx_vfs_write+0x10/0x10 [ 1503.737122][T16165] ? __fget_files+0x2a/0x420 [ 1503.737144][T16165] ? __fget_files+0x2a/0x420 [ 1503.737165][T16165] ? __fget_files+0x3a6/0x420 [ 1503.737180][T16165] ? __fget_files+0x2a/0x420 [ 1503.737214][T16165] ksys_write+0x156/0x270 [ 1503.737242][T16165] ? __pfx_ksys_write+0x10/0x10 [ 1503.737274][T16165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.737298][T16165] do_syscall_64+0x15f/0xf80 [ 1503.737335][T16165] ? clear_bhb_loop+0x40/0x90 [ 1503.737354][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.737398][T16165] RIP: 0033:0x7fd83218ce59 [ 1503.737420][T16165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.737442][T16165] RSP: 002b:00007fd8303c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1503.737467][T16165] RAX: ffffffffffffffda RBX: 00007fd832406090 RCX: 00007fd83218ce59 [ 1503.737486][T16165] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 000000000000000b [ 1503.737502][T16165] RBP: 00007fd832222d6f R08: 0000000000000000 R09: 0000000000000000 [ 1503.737521][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1503.737535][T16165] R13: 00007fd832406128 R14: 00007fd832406090 R15: 00007ffd2307d768 [ 1503.737556][T16165] [ 1503.738367][T16165] Kernel Offset: disabled